Which two elements does Tetration provide for security posture and traffic analysis? (Choose two.)

Question

Options

• ADevice updates
• BApp process information
• CApp access control
• DApp dependency map
• EHardware packages

• B
  89% (17)
• C
  5% (1)
• E
  5% (1)

Explanation

Cisco Tetration is a workload protection and visibility platform that collects deep telemetry from software sensors installed on workloads. App process information (B) is correct because Tetration monitors running processes on each workload, enabling detection of anomalous behavior and building a baseline security posture. App dependency map (D) is correct because Tetration automatically discovers and visualizes how applications communicate with one another, which is fundamental to traffic analysis and segmentation policy design.

Why the distractors are wrong:

• A (Device updates): Patch/update management is handled by tools like SCCM or Ansible-not Tetration's function.
• C (App access control): Tetration informs policy (e.g., recommends microsegmentation rules), but enforcement itself belongs to firewalls or policy engines-Tetration provides visibility, not enforcement.
• E (Hardware packages): Tetration is a software analytics platform; hardware inventory/packages are out of scope.

Memory tip: Think of Tetration as a detective, not a gatekeeper. It watches processes (what's running) and maps dependencies (who's talking to whom)-two things a detective needs to understand behavior. Anything about enforcing or updating belongs to other tools.

No community discussion yet for this question.