Which is a key feature of Cisco Defense Orchestra?

Profiling devices connected to the network is a function of Cisco Identity Services Engine (ISE), which performs device posture assessment and network access control, not CDO.

CDO's primary value is the ability to orchestrate and enforce consistent security policies across Cisco ASA, Firepower Threat Defense, Meraki MX, and other devices from one cloud-based console. This single-pane-of-glass approach eliminates the need to log into individual devices for policy changes and reduces configuration drift across the environment.

While CDO assists with configuration consistency, consolidating configuration management is a secondary capability - the primary and defining feature is policy orchestration across multiple device types.

Protection against zero-day attacks relies on Cisco Talos threat intelligence and NGIPS or AMP detection engines, not on CDO, which is a management and orchestration platform.