nerdexam
Cisco

350-701 · Question #393

Which Cisco platform provides an agentless solution to provide visibility across the network including encrypted traffic analytics to detect malware in encrypted traffic without the need for decryptio

The correct answer is B. Cisco Stealthwatch. Cisco Stealthwatch (now Cisco Secure Network Analytics) is an agentless platform that provides network visibility, including Encrypted Traffic Analytics (ETA) to detect malware in encrypted traffic without decryption.

Submitted by haru.x· Mar 30, 2026Visibility and Enforcement

Question

Which Cisco platform provides an agentless solution to provide visibility across the network including encrypted traffic analytics to detect malware in encrypted traffic without the need for decryption?

Options

  • ACisco Advanced Malware Protection
  • BCisco Stealthwatch
  • CCisco Identity Services Engine
  • DCisco AnyConnect

How the community answered

(53 responses)
  • A
    4% (2)
  • B
    87% (46)
  • C
    8% (4)
  • D
    2% (1)

Why each option

Cisco Stealthwatch (now Cisco Secure Network Analytics) is an agentless platform that provides network visibility, including Encrypted Traffic Analytics (ETA) to detect malware in encrypted traffic without decryption.

ACisco Advanced Malware Protection

Cisco Advanced Malware Protection (AMP) is an endpoint and email security solution focused on malware prevention and response, not an agentless network visibility platform for encrypted traffic analytics.

BCisco StealthwatchCorrect

Cisco Stealthwatch (now Cisco Secure Network Analytics) leverages network flow data to provide comprehensive network visibility and uses Encrypted Traffic Analytics (ETA) to identify threats within encrypted traffic, such as malware command-and-control communications, by analyzing metadata and behavioral patterns without requiring decryption of the payload, operating as an agentless solution.

CCisco Identity Services Engine

Cisco Identity Services Engine (ISE) is an access control and policy management platform that enforces security policies across the network, but it does not specialize in agentless network visibility or encrypted traffic analytics.

DCisco AnyConnect

Cisco AnyConnect is primarily a VPN client for secure remote access, not an agentless network visibility and encrypted traffic analytics platform.

Concept tested: Encrypted Traffic Analytics (ETA) with Stealthwatch

Source: https://www.cisco.com/c/en/us/products/security/stealthwatch/index.html

Topics

#Cisco Stealthwatch#Encrypted Traffic Analytics#Network Visibility#Malware Detection

Community Discussion

No community discussion yet for this question.

Full 350-701 Practice