nerdexam
Cisco

700-765 · Question #173

What are two features of Advanced Malware Protection (AMP)? (Choose two )

The correct answer is C. File Retrospection and Trajectory D. Dynamic Malware Analysis. Cisco AMP's two defining features are file retrospection with trajectory tracking and dynamic malware analysis through sandboxed execution.

Cisco Security Product Solutions

Question

What are two features of Advanced Malware Protection (AMP)? (Choose two )

Options

  • ALocal Threat Intelligence
  • BAutomatic Behavioral Authorization
  • CFile Retrospection and Trajectory
  • DDynamic Malware Analysis
  • EAutomated Policy Management

How the community answered

(51 responses)
  • A
    2% (1)
  • B
    2% (1)
  • C
    94% (48)
  • E
    2% (1)

Why each option

Cisco AMP's two defining features are file retrospection with trajectory tracking and dynamic malware analysis through sandboxed execution.

ALocal Threat Intelligence

AMP relies on Cisco's cloud-based Talos Threat Intelligence rather than local threat intelligence; local-only intelligence is not a defined feature of Cisco AMP.

BAutomatic Behavioral Authorization

Automatic Behavioral Authorization is not a defined or documented feature of Cisco AMP; behavioral analysis in AMP is used for threat detection, not for granting authorization.

CFile Retrospection and TrajectoryCorrect

File Retrospection and Trajectory is a core AMP capability that continuously monitors and records file activity so that if a file is later identified as malicious, AMP can retroactively trace its path across the network and identify all affected systems - enabling response after initial execution.

DDynamic Malware AnalysisCorrect

Dynamic Malware Analysis, powered by Cisco Threat Grid integration, executes suspicious files in a controlled sandbox environment to observe real-time behavior, detecting malware that bypasses static signature-based analysis.

EAutomated Policy Management

Automated Policy Management is not a feature of Cisco AMP; policy management is handled by separate platforms such as Firepower Management Center.

Concept tested: Cisco AMP file retrospection, trajectory, and dynamic analysis

Source: https://www.cisco.com/c/en/us/products/security/advanced-malware-protection/index.html

Topics

#AMP#file retrospection#dynamic malware analysis#file trajectory

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full 700-765 Practice