Which two Cisco products are a part of the "endpoints" threat-centric solution module? (Choose two.)

Question

Options

• ACisco Umbrella
• BCisco Defense Orchestrator
• CCisco VPN 3000
• DCisco Stealthwatch
• ECisco AMP for Endpoints

• A
  96% (23)
• D
  4% (1)

Explanation

Cisco AMP for Endpoints (E) is purpose-built for endpoint threat detection, investigation, and response - it monitors files and processes directly on devices. Cisco Umbrella (A) qualifies as an endpoint-focused solution because it deploys a roaming client directly on endpoints, extending DNS-layer security to users regardless of their network location.

The distractors are wrong for these reasons: Cisco Defense Orchestrator (B) is a cloud-based firewall and security policy management tool, not an endpoint product. Cisco VPN 3000 (C) is a legacy, discontinued VPN concentrator that operates at the network access layer. Cisco Stealthwatch (D) is a network traffic analysis platform focused on detecting threats within the network - not on endpoints.

Memory tip: Think "AMP + Agent = Endpoints." AMP for Endpoints protects the device itself, and Umbrella uses an agent running on the endpoint. Both touch the endpoint directly, while the others (firewall management, VPN hardware, network flow analysis) operate at the network or management layer.

No community discussion yet for this question.