700-765 · Question #17
What are three major features of Cisco Defense Orchestrator? (Choose three.)
The correct answer is B. Receive notifications about any unplanned changes to security policies and objects C. Plan and model security changes before deploying them across the cloud E. Ability to deploy changes across virtual environments in real time or offline. Cisco Defense Orchestrator (CDO) is a cloud-based security management platform that provides change notifications, pre-deployment policy modeling, and flexible deployment across virtual and physical environments.
Question
What are three major features of Cisco Defense Orchestrator? (Choose three.)
Options
- AProviding retrospective security to protect against malware
- BReceive notifications about any unplanned changes to security policies and objects
- CPlan and model security changes before deploying them across the cloud
- DIdentifying anomalous traffic in customer's network
- EAbility to deploy changes across virtual environments in real time or offline
- FTracking suspicious files through the network
How the community answered
(34 responses)- B91% (31)
- D3% (1)
- F6% (2)
Why each option
Cisco Defense Orchestrator (CDO) is a cloud-based security management platform that provides change notifications, pre-deployment policy modeling, and flexible deployment across virtual and physical environments.
Retrospective security for malware protection is a feature of Cisco Secure Endpoint (formerly AMP for Endpoints), which analyzes file behavior after execution, not a CDO capability.
CDO continuously monitors managed devices and triggers alerts when out-of-band or unplanned changes are detected in security policies or objects, giving administrators immediate visibility into unauthorized modifications.
CDO includes a change modeling workflow that allows administrators to plan and simulate policy updates across devices before committing them to production, reducing the risk of misconfigurations.
Identifying anomalous traffic is a function of Cisco Secure Network Analytics (formerly Stealthwatch), which performs flow-based behavioral analysis, not CDO.
CDO supports pushing configuration changes to physical, virtual, and cloud-based firewall environments either immediately in real time or scheduling them for offline maintenance windows.
Tracking suspicious files through the network is a capability of Cisco Secure Endpoint and the AMP ecosystem, not CDO.
Concept tested: Cisco Defense Orchestrator core management features
Source: https://www.cisco.com/c/en/us/products/security/defense-orchestrator/index.html
Topics
Community Discussion
No community discussion yet for this question.