700-765 Question #27: Real Exam Question with Answer & Explanation

The correct answer is B: Network Visibility Module. The AnyConnect Network Visibility Module (NVM) exports rich endpoint flow telemetry that enables security teams to spot anomalous behavior and data breaches as they occur.

Cisco Security Product Solutions

Question

Which feature of AnyConnect provides you the ability to identify data breaches as they happen?

Options

AFlexible AAA Options
BNetwork Visibility Module
CDifferentiated Mobile Access
DTrusted Network Detection

Explanation

The AnyConnect Network Visibility Module (NVM) exports rich endpoint flow telemetry that enables security teams to spot anomalous behavior and data breaches as they occur.

Common mistakes.

A. Flexible AAA Options refers to AnyConnect's support for multiple authentication, authorization, and accounting backends, which governs access control but provides no telemetry for detecting breaches.
C. Differentiated Mobile Access tailors VPN behavior and policies for mobile devices on a per-app or per-device basis, addressing connectivity management rather than threat or breach detection.
D. Trusted Network Detection automatically connects or disconnects the VPN based on whether the endpoint is on a recognized trusted network, which is a connectivity automation feature unrelated to identifying data breaches.

Concept tested. AnyConnect Network Visibility Module endpoint flow telemetry for breach detection

Reference. https://www.cisco.com/c/en/us/td/docs/security/vpn_client/anyconnect/anyconnect410/administration/guide/b_AnyConnect_Administrator_Guide_4-10/b_AnyConnect_Administrator_Guide_4-10_chapter_01001.html

Topics

#AnyConnect#Network Visibility Module#data breach detection#endpoint telemetry

Community Discussion

No community discussion yet for this question.

Full 700-765 Practice