What are three major features of Cisco Defense Orchestrator? (Choose three.)

Question

Options

• AProviding retrospective security to protect against malware
• BReceive notifications about any unplanned changes to security policies and objects
• CPlan and model security changes before deploying them across the cloud
• DIdentifying anomalous traffic in customer's network
• EAbility to deploy changes across virtual environments in real time or offline
• FTracking suspicious files through the network

• B
  94% (34)
• D
  3% (1)
• F
  3% (1)

Explanation

Cisco Defense Orchestrator (CDO) is a cloud-based policy management platform - it manages, plans, and monitors security configurations across devices. Options B, C, and E are correct because they all describe policy management capabilities: CDO notifies administrators of unplanned (unauthorized) configuration changes (B), lets teams model and simulate changes before deployment to avoid misconfigurations (C), and supports real-time or offline deployment of policy changes across virtual environments (E).

The three distractors (A, D, F) describe threat detection and malware capabilities that belong to other Cisco products: retrospective malware protection (A) and file tracking (F) are features of Cisco Secure Endpoint (AMP), while anomalous traffic identification (D) is the domain of Cisco Secure Network Analytics (Stealthwatch). CDO operates on the management plane, not the threat detection plane.

Memory tip: Think of CDO's three core verbs - Notify, Plan, Deploy. If an answer choice involves detecting threats, tracking files, or analyzing malware, it belongs to a security enforcement product, not a policy management tool like CDO.

No community discussion yet for this question.