Which are three Cisco Advanced Threat solutions? (Choose three.)

Question

Options

• AAMP
• BIdentity and Access Control
• CRemote Access VPN
• DStealthwatch
• ENext Generation Intrusion Prevention System
• FCognitive Threat Analytics

• A
  2% (1)
• B
  91% (40)
• C
  2% (1)
• E
  5% (2)

Explanation

Cisco organizes its security portfolio into distinct categories, and the Advanced Threat pillar specifically covers solutions designed to detect, analyze, and respond to sophisticated attacks using behavioral analytics and intelligence. Stealthwatch (D) monitors network traffic patterns using machine learning to detect anomalies indicative of advanced threats like insider threats and C2 communication. Cognitive Threat Analytics (F) is a cloud-based service that applies statistical modeling to web traffic to uncover compromised endpoints. Identity and Access Control (B) fits because Cisco positions identity-centric security - particularly solutions like ISE - as a core advanced threat defense mechanism, since attackers frequently exploit credentials to move laterally.

Why the distractors are wrong:

• AMP (A) - While AMP for Endpoints is a Cisco threat product, in this specific portfolio framework it is often classified separately (under endpoint/malware protection), making it a tempting but incorrect choice here.
• Remote Access VPN (C) - This is a network connectivity and access solution, not a threat detection/analytics tool.
• NGIPS (E) - Next-Gen IPS falls under the Threat Defense or Network Security category, not the Advanced Threat analytics pillar.

Memory tip: Think of the Advanced Threat category as "see the invisible threat" - Stealthwatch watches the network, Cognitive Threat Analytics thinks about behavioral anomalies, and Identity control catches attackers pretending to be legitimate users. All three involve analysis and intelligence beyond basic perimeter blocking.

No community discussion yet for this question.