700-765 · Question #150
How does AMP's file reputation feature help customers?
The correct answer is B. It increases the accuracy of threat detection with Big Data analytics. AMP's file reputation feature leverages Big Data analytics and cloud-sourced threat intelligence to improve the accuracy of identifying malicious files across millions of endpoints.
Question
How does AMP's file reputation feature help customers?
Options
- AIt increases the protection to systems with exact fingerprinting
- BIt increases the accuracy of threat detection with Big Data analytics
- CIt enables point in time detection through a one-to-one engine
- DIt enables secure web browsing with cognitive threat analytics
How the community answered
(38 responses)- A5% (2)
- B84% (32)
- C3% (1)
- D8% (3)
Why each option
AMP's file reputation feature leverages Big Data analytics and cloud-sourced threat intelligence to improve the accuracy of identifying malicious files across millions of endpoints.
Exact fingerprinting describes a point-in-time hash-matching technique that AMP does use, but the reputation feature's value comes from Big Data analytics and collective intelligence, not fingerprinting alone.
AMP's file reputation uses Cisco's cloud-based Big Data analytics engine, which aggregates telemetry from hundreds of millions of endpoints and sensors worldwide. By correlating file hashes, behaviors, and metadata at massive scale, it produces highly accurate reputation scores that improve threat detection far beyond what local or signature-based engines can achieve.
Point-in-time detection via a one-to-one engine describes a simpler, less effective matching approach - AMP's reputation feature goes beyond this by using continuous, cloud-based collective intelligence rather than a single static lookup.
Secure web browsing with cognitive threat analytics is associated with Cisco Umbrella and its DNS-layer security, not with AMP's file reputation feature.
Concept tested: AMP file reputation and Big Data threat detection
Source: https://www.cisco.com/c/en/us/products/security/advanced-malware-protection/index.html
Topics
Community Discussion
No community discussion yet for this question.