700-765 · Question #165
What is one of the key features of Cognitive Intelligence?
The correct answer is C. Allows visibility into anonymous and encrypted communications. Cisco Cognitive Intelligence (formerly Cognitive Threat Analytics) is specifically designed to detect malicious behavior within encrypted and anonymous traffic where traditional inspection cannot reach.
Question
What is one of the key features of Cognitive Intelligence?
Options
- AIt enables safe email usage with event analytics
- BIt enhances anonymity with URL filtering
- CAllows visibility into anonymous and encrypted communications
- DIt enables greater threat intelligence with entity modeling
How the community answered
(59 responses)- A3% (2)
- B2% (1)
- C93% (55)
- D2% (1)
Why each option
Cisco Cognitive Intelligence (formerly Cognitive Threat Analytics) is specifically designed to detect malicious behavior within encrypted and anonymous traffic where traditional inspection cannot reach.
Safe email usage and event analytics describe capabilities of Cisco Secure Email (formerly Email Security Appliance), not Cognitive Intelligence.
Cognitive Intelligence reduces anonymity for attackers by detecting their activity - it does not enhance anonymity, and URL filtering is a web-proxy or DNS function unrelated to this product.
Cisco Cognitive Intelligence uses machine learning and behavioral analysis on network traffic metadata rather than payload inspection, allowing it to identify threats hidden inside encrypted TLS sessions and traffic routed through anonymizing networks such as Tor, where content-based inspection is ineffective.
Entity modeling for threat intelligence is more characteristic of user and entity behavior analytics (UEBA) solutions or Cisco Secure Network Analytics, not the core function of Cognitive Intelligence.
Concept tested: Cisco Cognitive Intelligence encrypted traffic visibility
Source: https://www.cisco.com/c/en/us/products/security/cognitive-threat-analytics/index.html
Topics
Community Discussion
No community discussion yet for this question.