Which is a key feature of Cisco Defense Orchestrator?

Question

Options

• ASimplifies security policy management
• BIdentifies sensitive data in cloud environments
• CDetects anomalous traffic on customer's network
• DProvides retrospective security

• A
  93% (26)
• B
  4% (1)
• D
  4% (1)

Explanation

Cisco Defense Orchestrator (CDO) is a cloud-based security management platform designed specifically to simplify and centralize the management of security policies across multiple Cisco devices (ASA firewalls, FTD, Meraki, etc.) - making A the correct answer.

• B is wrong because identifying sensitive data in cloud environments describes a Data Loss Prevention (DLP) or Cloud Access Security Broker (CASB) tool like Cisco Cloudlock or Macie (AWS).
• C is wrong because detecting anomalous network traffic is the role of Cisco Stealthwatch (now Cisco Secure Network Analytics), which uses NetFlow for behavioral analysis.
• D is wrong because retrospective security - the ability to look back and analyze threats after the fact - is a hallmark of Cisco AMP (Advanced Malware Protection) / Secure Endpoint, not CDO.

Memory tip: Think of CDO as the "conductor of an orchestra" - it doesn't play an instrument itself, it orchestrates (manages and coordinates) all your security policy instruments from one place. The word "Orchestrator" in the name is your direct clue that it's about management/policy, not detection or data analysis.

No community discussion yet for this question.