Which feature of AMP tracks the movement of a file within the environment and monitors its disposition over time?

Question

Options

• ATrajectory
• BFuzzy Fingerprinting
• CMachine Learning
• DThreatGrid

• A
  89% (34)
• B
  3% (1)
• C
  5% (2)
• D
  3% (1)

Explanation

Trajectory is AMP's feature that creates a visual map of a file's path through your environment - showing where it came from, which systems it touched, and how its disposition (clean, unknown, malicious) changed over time. This makes it invaluable for incident response, letting analysts quickly scope the blast radius of an infection.

Why the distractors are wrong:

• B. Fuzzy Fingerprinting - matches malware variants with slight mutations using partial-hash comparison; it's about identification, not movement tracking.
• C. Machine Learning - used for detecting threats by analyzing behavioral patterns, not for mapping file movement.
• D. ThreatGrid - Cisco's sandboxing/threat intelligence platform that analyzes suspicious files in isolation; it doesn't track lateral movement in your live environment.

Memory tip: Think of a ballistic trajectory - just as you'd trace the arc of a projectile from launch to impact, AMP Trajectory traces a file's arc from entry point to every endpoint it touched.

No community discussion yet for this question.