700-765 · Question #53
Which feature of AMP tracks the movement of a file within the environment and monitors its disposition over time?
The correct answer is A. Trajectory. AMP's Trajectory feature records and visualizes the complete file activity path across an environment, enabling analysts to see where a file came from and how its threat disposition changed over time.
Question
Which feature of AMP tracks the movement of a file within the environment and monitors its disposition over time?
Options
- ATrajectory
- BFuzzy Fingerprinting
- CMachine Learning
- DThreatGrid
How the community answered
(64 responses)- A86% (55)
- B8% (5)
- C2% (1)
- D5% (3)
Why each option
AMP's Trajectory feature records and visualizes the complete file activity path across an environment, enabling analysts to see where a file came from and how its threat disposition changed over time.
Trajectory is the AMP feature specifically designed to track how a file entered the environment, where it spread, and how its SHA-256 disposition changed over time. It provides a visual timeline of file movement across all endpoints, making retrospective analysis possible when a file is later found to be malicious.
Fuzzy Fingerprinting is used to identify malware variants by comparing partial file fingerprints, not to track file movement or monitor disposition changes over time.
Machine Learning in AMP is used for detecting unknown threats by analyzing file characteristics statistically, not for tracking file trajectory or disposition history.
ThreatGrid is a dynamic malware analysis sandboxing service that detonates suspicious files to analyze behavior, not a feature that tracks file movement within an environment.
Concept tested: Cisco AMP Trajectory file movement tracking
Source: https://www.cisco.com/c/en/us/products/security/amp-for-endpoints/index.html
Topics
Community Discussion
No community discussion yet for this question.