350-701 · Question #160
Refer to the exhibit. What does the API do when connected to a Cisco security appliance?
The correct answer is D. gather the network interface information about the computers AMP sees. When an API connects to a Cisco security appliance, it can be used to gather network interface information about the computers that Cisco AMP (Advanced Malware Protection) observes.
Question
Refer to the exhibit. What does the API do when connected to a Cisco security appliance?
Exhibit
Options
- Agather network telemetry information from AMP for endpoints
- Bcreate an SNMP pull mechanism for managing AMP
- Cget the process and PID information from the computers in the network
- Dgather the network interface information about the computers AMP sees
How the community answered
(25 responses)- A8% (2)
- B4% (1)
- C4% (1)
- D84% (21)
Why each option
When an API connects to a Cisco security appliance, it can be used to gather network interface information about the computers that Cisco AMP (Advanced Malware Protection) observes.
While AMP gathers telemetry, 'network telemetry information' is a broad term; APIs are often used to retrieve specific data points like network interface details for asset inventory.
APIs are distinct from SNMP; SNMP is a protocol for network device management and monitoring, not for managing AMP or its collected data via an API pull mechanism.
While AMP can provide process information, gathering network interface information is a common and specific use case for APIs querying endpoint security solutions to understand network presence.
Cisco AMP for Endpoints collects detailed endpoint telemetry, including network interface information such as MAC addresses, IP addresses, and network connections. This data can be accessed via APIs for integration with other security tools or for deeper analysis of endpoint network activity.
Concept tested: Cisco AMP API capabilities for endpoint network data
Source: https://developer.cisco.com/amp-for-endpoints/
Topics
Community Discussion
No community discussion yet for this question.
