nerdexam
Cisco

700-270 · Question #27

Which two options are objectives that are defined as part of the "before" stage of the attack continuum? {Choose two.)

The correct answer is A. harden C. enforce. Harden (A) and Enforce (C) are correct because Cisco's Attack Continuum framework defines the "Before" stage as proactive measures taken prior to an attack occurring - specifically: Discover, Enforce, and Harden. Hardening reduces the attack surface (patching, secure configs), wh

Understanding Next-Generation Firewall Technology and Concepts

Question

Which two options are objectives that are defined as part of the "before" stage of the attack continuum? {Choose two.)

Options

  • Aharden
  • Bretrospection
  • Cenforce
  • Ddetect
  • Eshun

How the community answered

(41 responses)
  • A
    95% (39)
  • B
    2% (1)
  • D
    2% (1)

Explanation

Harden (A) and Enforce (C) are correct because Cisco's Attack Continuum framework defines the "Before" stage as proactive measures taken prior to an attack occurring - specifically: Discover, Enforce, and Harden. Hardening reduces the attack surface (patching, secure configs), while enforcing applies policies and access controls to limit what's permitted on the network.

Why the distractors are wrong:

  • B. Retrospection belongs to the "After" stage - it's the process of reviewing what happened post-attack to improve future defenses.
  • D. Detect belongs to the "During" stage - identifying an attack as it's happening in real time.
  • E. Shun also belongs to the "During" stage - actively blocking or isolating a threat mid-attack.

Memory tip: Think of the three stages as "Prep → React → Review". Before = Discover, Enforce, Harden (DEH - "Do Everything beforehand, Harden"). During = Detect, Block, Defend. After = Scope, Contain, Remediate, Retrospect. If an option sounds like prevention or policy, it's "Before"; if it sounds like real-time response, it's "During"; if it sounds like post-mortem analysis, it's "After."

Topics

#Attack Continuum#Prevention#Hardening#Enforcement

Community Discussion

No community discussion yet for this question.

Full 700-270 Practice