350-701 · Question #393
Which Cisco platform provides an agentless solution to provide visibility across the network including encrypted traffic analytics to detect malware in encrypted traffic without the need for decryptio
The correct answer is B. Cisco Stealthwatch. Cisco Stealthwatch (now Cisco Secure Network Analytics) is an agentless platform that provides network visibility, including Encrypted Traffic Analytics (ETA) to detect malware in encrypted traffic without decryption.
Question
Which Cisco platform provides an agentless solution to provide visibility across the network including encrypted traffic analytics to detect malware in encrypted traffic without the need for decryption?
Options
- ACisco Advanced Malware Protection
- BCisco Stealthwatch
- CCisco Identity Services Engine
- DCisco AnyConnect
How the community answered
(53 responses)- A4% (2)
- B87% (46)
- C8% (4)
- D2% (1)
Why each option
Cisco Stealthwatch (now Cisco Secure Network Analytics) is an agentless platform that provides network visibility, including Encrypted Traffic Analytics (ETA) to detect malware in encrypted traffic without decryption.
Cisco Advanced Malware Protection (AMP) is an endpoint and email security solution focused on malware prevention and response, not an agentless network visibility platform for encrypted traffic analytics.
Cisco Stealthwatch (now Cisco Secure Network Analytics) leverages network flow data to provide comprehensive network visibility and uses Encrypted Traffic Analytics (ETA) to identify threats within encrypted traffic, such as malware command-and-control communications, by analyzing metadata and behavioral patterns without requiring decryption of the payload, operating as an agentless solution.
Cisco Identity Services Engine (ISE) is an access control and policy management platform that enforces security policies across the network, but it does not specialize in agentless network visibility or encrypted traffic analytics.
Cisco AnyConnect is primarily a VPN client for secure remote access, not an agentless network visibility and encrypted traffic analytics platform.
Concept tested: Encrypted Traffic Analytics (ETA) with Stealthwatch
Source: https://www.cisco.com/c/en/us/products/security/stealthwatch/index.html
Topics
Community Discussion
No community discussion yet for this question.