nerdexam
Cisco

700-765 · Question #150

How does AMP's file reputation feature help customers?

The correct answer is B. It increases the accuracy of threat detection with Big Data analytics. AMP's file reputation feature leverages Big Data analytics and cloud-sourced threat intelligence to improve the accuracy of identifying malicious files across millions of endpoints.

Cisco Security Product Solutions

Question

How does AMP's file reputation feature help customers?

Options

  • AIt increases the protection to systems with exact fingerprinting
  • BIt increases the accuracy of threat detection with Big Data analytics
  • CIt enables point in time detection through a one-to-one engine
  • DIt enables secure web browsing with cognitive threat analytics

How the community answered

(38 responses)
  • A
    5% (2)
  • B
    84% (32)
  • C
    3% (1)
  • D
    8% (3)

Why each option

AMP's file reputation feature leverages Big Data analytics and cloud-sourced threat intelligence to improve the accuracy of identifying malicious files across millions of endpoints.

AIt increases the protection to systems with exact fingerprinting

Exact fingerprinting describes a point-in-time hash-matching technique that AMP does use, but the reputation feature's value comes from Big Data analytics and collective intelligence, not fingerprinting alone.

BIt increases the accuracy of threat detection with Big Data analyticsCorrect

AMP's file reputation uses Cisco's cloud-based Big Data analytics engine, which aggregates telemetry from hundreds of millions of endpoints and sensors worldwide. By correlating file hashes, behaviors, and metadata at massive scale, it produces highly accurate reputation scores that improve threat detection far beyond what local or signature-based engines can achieve.

CIt enables point in time detection through a one-to-one engine

Point-in-time detection via a one-to-one engine describes a simpler, less effective matching approach - AMP's reputation feature goes beyond this by using continuous, cloud-based collective intelligence rather than a single static lookup.

DIt enables secure web browsing with cognitive threat analytics

Secure web browsing with cognitive threat analytics is associated with Cisco Umbrella and its DNS-layer security, not with AMP's file reputation feature.

Concept tested: AMP file reputation and Big Data threat detection

Source: https://www.cisco.com/c/en/us/products/security/advanced-malware-protection/index.html

Topics

#AMP#file reputation#Big Data analytics#threat detection

Community Discussion

No community discussion yet for this question.

Full 700-765 Practice