700-765 Question #18: Real Exam Question with Answer & Explanation

The correct answer is B: Blocks Domains/IPs associated with malware, phising, etc. Cisco Umbrella provides DNS-layer security by blocking malicious domains and IPs, operating as a cloud-delivered recursive DNS resolver, and logging all DNS-based internet activity.

Question

What are three benefits that Cisco Umbrella brings to DNS-Layer Security? (Choose three.)

Options

AHelps provide breach mitigation
BBlocks Domains/IPs associated with malware, phising, etc
CDelivers cloud based recursive DNS
DProvides profiling of devices
ELogs all internet activity
FProvides Sandboxing of malware

Explanation

Cisco Umbrella provides DNS-layer security by blocking malicious domains and IPs, operating as a cloud-delivered recursive DNS resolver, and logging all DNS-based internet activity.

Common mistakes.

A. Breach mitigation is a broad outcome, not a specific DNS-layer feature - Umbrella prevents threats before connection rather than mitigating damage after a breach occurs.
D. Device profiling is a capability of network access control solutions such as Cisco Identity Services Engine (ISE), not a function of DNS-layer security.
F. Sandboxing of malware is provided by Cisco Secure Malware Analytics (Threat Grid), a separate service that is not part of Umbrella's DNS-layer security feature set.

Concept tested. Cisco Umbrella DNS-layer security capabilities

Reference. https://docs.umbrella.com/umbrella-user-guide/docs/welcome-to-cisco-umbrella

Community Discussion

No community discussion yet for this question.

Full 700-765 Practice