300-710 · Question #220
The network administrator wants to enhance the network security posture by enabling machine learning tor malware detection due to a concern with suspicious Microsoft executable file types that were…
The correct answer is A. Spero. To enable machine learning for malware detection, especially for suspicious Microsoft executable files, the Spero engine within Cisco AMP must be enabled.
Question
The network administrator wants to enhance the network security posture by enabling machine learning tor malware detection due to a concern with suspicious Microsoft executable file types that were seen while creating monthly security reports for the CIO. Which feature must be enabled to accomplish this goal?
Options
- ASpero
- Bdynamic analysis
- Cstatic analysis
- DEthos
How the community answered
(56 responses)- A91% (51)
- B2% (1)
- C2% (1)
- D5% (3)
Why each option
To enable machine learning for malware detection, especially for suspicious Microsoft executable files, the Spero engine within Cisco AMP must be enabled.
Spero is a machine learning-based detection engine in Cisco Advanced Malware Protection (AMP) that specializes in identifying and blocking advanced malware, particularly polymorphic variants and zero-day threats found in executable files. It analyzes file characteristics and behavior to detect suspicious Microsoft executable file types.
Dynamic analysis is a technique (sandboxing) for malware detection, but 'Spero' is the specific Cisco AMP engine that utilizes machine learning for this purpose on executables.
Static analysis is a technique for malware detection, but 'Spero' is the specific Cisco AMP engine utilizing machine learning for executable analysis.
Ethos is another Cisco AMP engine focused on detecting polymorphic variants and malware families, not primarily on general machine learning for suspicious executable file types as Spero is.
Concept tested: Cisco AMP Spero engine for machine learning malware detection
Source: https://www.cisco.com/c/en/us/products/collateral/security/amp-threat-grid/white-paper-c11-736021.html
Topics
Community Discussion
No community discussion yet for this question.