Which method is used by a Cisco XDR solution to prioritize actions?

Question

Options

• AUpdating antivirus signatures
• BMonitoring endpoint activity
• CLeveraging AI and machine learning
• DAnalyzing network traffic patterns

• C
  95% (21)
• D
  5% (1)

Explanation

Cisco XDR (Extended Detection and Response) leverages AI and machine learning to correlate telemetry across multiple security layers and automatically prioritize threats based on risk scoring, enabling faster, more accurate response decisions without manual triage. Options A (updating antivirus signatures) and B (monitoring endpoint activity) are supporting capabilities within a broader security stack, but they are data collection or reactive maintenance tasks - not the mechanism XDR uses to prioritize actions. Option D (analyzing network traffic patterns) is one input source XDR may consume, but analyzing a single data stream describes a narrower tool like an IDS/IPS, not XDR's cross-domain prioritization logic. Memory tip: Think of XDR as a "smart triage system" - just as a hospital uses algorithms to prioritize patients by severity, XDR uses AI/ML to rank threats by risk across endpoints, network, email, and cloud simultaneously.

No community discussion yet for this question.