Which component of StealthWatch uses sophisticated security analytics to accelerate threat response times?

Question

Options

• ANetwork control
• BInvestigation
• CAnomaly detection
• DThreat protection

• B
  92% (23)
• C
  4% (1)
• D
  4% (1)

Explanation

Investigation is the correct answer because this component of Cisco Stealthwatch leverages advanced security analytics - such as behavioral modeling, contextual data correlation, and automated workflows - to help security analysts quickly identify the scope and nature of threats, dramatically reducing time-to-response. Network control (A) is a distractor focused on enforcing access policies, not driving analytics. Anomaly detection (C) identifies deviations from baseline behavior but is the input stage that feeds investigations, not the component that accelerates response through analytics. Threat protection (D) is oriented toward blocking or mitigating threats, not the analytical investigation phase that speeds response.

Memory tip: Think of "Investigation" as the analyst's command center - just as a detective uses evidence and analysis to solve a case faster, the Investigation component uses Stealthwatch's analytics engine to cut through noise and accelerate response. "Investigate to accelerate."

No community discussion yet for this question.