nerdexam
Cisco

350-701 · Question #344

An organization wants to implement a cloud-delivered and SaaS-based solution to provide visibility and threat detection across the AWS network. The solution must be deployed without software agents an

The correct answer is A. Cisco Stealthwatch Cloud. Cisco Stealthwatch Cloud provides agentless, cloud-delivered visibility and threat detection for AWS networks by analyzing VPC Flow Logs.

Submitted by jordan8· Mar 30, 2026Cloud Security

Question

An organization wants to implement a cloud-delivered and SaaS-based solution to provide visibility and threat detection across the AWS network. The solution must be deployed without software agents and rely on AWS VPC flow logs instead. Which solution meets these requirements?

Options

  • ACisco Stealthwatch Cloud
  • BCisco Umbrella
  • CNetFlow collectors
  • DCisco Cloudlock

How the community answered

(33 responses)
  • A
    67% (22)
  • B
    18% (6)
  • C
    9% (3)
  • D
    6% (2)

Why each option

Cisco Stealthwatch Cloud provides agentless, cloud-delivered visibility and threat detection for AWS networks by analyzing VPC Flow Logs.

ACisco Stealthwatch CloudCorrect

Cisco Stealthwatch Cloud (now part of Cisco Secure Network Analytics) is a cloud-delivered, SaaS-based solution specifically designed to provide visibility and threat detection across cloud environments like AWS. It meets the requirements by being agentless, relying on native cloud logs such as AWS VPC Flow Logs for network traffic analysis and anomaly detection.

BCisco Umbrella

Cisco Umbrella focuses on DNS-layer security and secure web gateway functions, not comprehensive agentless network visibility and threat detection across AWS using VPC flow logs.

CNetFlow collectors

NetFlow collectors are components, not a complete SaaS solution, and while they collect flow data, the question asks for a cloud-delivered solution that relies on AWS VPC flow logs, which Stealthwatch Cloud does automatically.

DCisco Cloudlock

Cisco Cloudlock is a CASB (Cloud Access Security Broker) focused on securing SaaS applications and IaaS/PaaS data, not primarily on agentless network threat detection via VPC Flow Logs across the entire AWS network.

Concept tested: Cloud network visibility and threat detection (AWS VPC Flow Logs)

Source: https://www.cisco.com/c/en/us/products/security/stealthwatch/cloud.html

Topics

#Cisco Stealthwatch Cloud#AWS Security Monitoring#Threat Detection#VPC Flow Logs

Community Discussion

No community discussion yet for this question.

Full 350-701 Practice