nerdexam
Cisco

300-710 · Question #220

The network administrator wants to enhance the network security posture by enabling machine learning tor malware detection due to a concern with suspicious Microsoft executable file types that were…

The correct answer is A. Spero. To enable machine learning for malware detection, especially for suspicious Microsoft executable files, the Spero engine within Cisco AMP must be enabled.

Configuration

Question

The network administrator wants to enhance the network security posture by enabling machine learning tor malware detection due to a concern with suspicious Microsoft executable file types that were seen while creating monthly security reports for the CIO. Which feature must be enabled to accomplish this goal?

Options

  • ASpero
  • Bdynamic analysis
  • Cstatic analysis
  • DEthos

How the community answered

(56 responses)
  • A
    91% (51)
  • B
    2% (1)
  • C
    2% (1)
  • D
    5% (3)

Why each option

To enable machine learning for malware detection, especially for suspicious Microsoft executable files, the Spero engine within Cisco AMP must be enabled.

ASperoCorrect

Spero is a machine learning-based detection engine in Cisco Advanced Malware Protection (AMP) that specializes in identifying and blocking advanced malware, particularly polymorphic variants and zero-day threats found in executable files. It analyzes file characteristics and behavior to detect suspicious Microsoft executable file types.

Bdynamic analysis

Dynamic analysis is a technique (sandboxing) for malware detection, but 'Spero' is the specific Cisco AMP engine that utilizes machine learning for this purpose on executables.

Cstatic analysis

Static analysis is a technique for malware detection, but 'Spero' is the specific Cisco AMP engine utilizing machine learning for executable analysis.

DEthos

Ethos is another Cisco AMP engine focused on detecting polymorphic variants and malware families, not primarily on general machine learning for suspicious executable file types as Spero is.

Concept tested: Cisco AMP Spero engine for machine learning malware detection

Source: https://www.cisco.com/c/en/us/products/collateral/security/amp-threat-grid/white-paper-c11-736021.html

Topics

#Spero#Malware Detection#Machine Learning#Cisco Firepower

Community Discussion

No community discussion yet for this question.

Full 300-710 Practice