nerdexam
Cisco

500-651 · Question #19

Which is a key feature of Cisco Defense Orchestra?

The correct answer is B. Orchestrates security policy management form one place. Option B is correct because Cisco Defense Orchestrator (CDO) is a cloud-based security policy management platform designed to centrally manage security policies across multiple Cisco devices and services - firewalls, ASAs, FTDs, and more - from a single pane of glass. A is…

Security Operations and Automation

Question

Which is a key feature of Cisco Defense Orchestra?

Options

  • AProfiles devices connected to customer s network
  • BOrchestrates security policy management form one place
  • CConsolidates configuration management
  • DProtects customers network against zero-day attacks

How the community answered

(43 responses)
  • A
    2% (1)
  • B
    88% (38)
  • C
    7% (3)
  • D
    2% (1)

Explanation

Option B is correct because Cisco Defense Orchestrator (CDO) is a cloud-based security policy management platform designed to centrally manage security policies across multiple Cisco devices and services - firewalls, ASAs, FTDs, and more - from a single pane of glass.

  • A is wrong - Device profiling is associated with tools like Cisco ISE (Identity Services Engine) or Cisco Secure Network Analytics, not CDO.
  • C is wrong - While CDO does touch configuration, its primary value proposition is policy orchestration, not general configuration management (that's more aligned with tools like Cisco Prime or DNAC).
  • D is wrong - Zero-day protection is the domain of tools like Cisco Talos, AMP/Secure Endpoint, or Cisco Umbrella, not CDO.

Memory tip: The word Orchestrator is in the product name itself - CDO orchestrates security policy. If you see "orchestrate" or "single place for policy management," think CDO.

Topics

#Defense Orchestra#Security Policy Management#Security Orchestration#Centralized Management

Community Discussion

No community discussion yet for this question.

Full 500-651 Practice