Which two options are products and benefits of the mobile threat-centric solution? (Choose two)

Question

Options

• Aenforced device security policies with Meraki
• Benhanced control access with ISE and Cloudlock
• Cdevice phishing protection through AMP
• Dautomated policy enforcement with ASAv
• Esoftware-defined segmentation through TrustSec

• A
  92% (45)
• C
  2% (1)
• D
  2% (1)
• E
  4% (2)

Explanation

Cisco's mobile threat-centric solution is built around managing and securing mobile endpoints through MDM and access control: Meraki Systems Manager enforces device security policies (compliance, encryption, remote wipe) directly on mobile devices, while ISE paired with Cloudlock extends identity-based access control to cloud apps, making A and B the correct fit for this solution pillar.

Why the distractors are wrong:

• C is incorrect because AMP (Advanced Malware Protection) addresses malware detection broadly - it's associated with the threat-centric pillar, not specifically mobile, and its primary function is malware analysis, not phishing protection.
• D is incorrect because ASAv is a virtual firewall/VPN appliance - it handles perimeter and remote-access security, not mobile-specific policy enforcement.
• E is incorrect because TrustSec software-defined segmentation is a network-layer segmentation technology (using SGTs), belonging more to the network threat-centric solution, not the mobile-focused one.

Memory tip: Think "M + I+C" - Meraki manages the device itself, and ISE + Cloudlock controls what that device can access. Mobile threat-centric = control the device (Meraki) and control the access (ISE/Cloudlock). Anything that sounds like a firewall (ASAv), network segmentation (TrustSec), or general malware tool (AMP) belongs to a different security pillar.

No community discussion yet for this question.