nerdexam
Cisco

700-765 · Question #53

Which feature of AMP tracks the movement of a file within the environment and monitors its disposition over time?

The correct answer is A. Trajectory. AMP's Trajectory feature records and visualizes the complete file activity path across an environment, enabling analysts to see where a file came from and how its threat disposition changed over time.

Cisco Security Product Solutions

Question

Which feature of AMP tracks the movement of a file within the environment and monitors its disposition over time?

Options

  • ATrajectory
  • BFuzzy Fingerprinting
  • CMachine Learning
  • DThreatGrid

How the community answered

(64 responses)
  • A
    86% (55)
  • B
    8% (5)
  • C
    2% (1)
  • D
    5% (3)

Why each option

AMP's Trajectory feature records and visualizes the complete file activity path across an environment, enabling analysts to see where a file came from and how its threat disposition changed over time.

ATrajectoryCorrect

Trajectory is the AMP feature specifically designed to track how a file entered the environment, where it spread, and how its SHA-256 disposition changed over time. It provides a visual timeline of file movement across all endpoints, making retrospective analysis possible when a file is later found to be malicious.

BFuzzy Fingerprinting

Fuzzy Fingerprinting is used to identify malware variants by comparing partial file fingerprints, not to track file movement or monitor disposition changes over time.

CMachine Learning

Machine Learning in AMP is used for detecting unknown threats by analyzing file characteristics statistically, not for tracking file trajectory or disposition history.

DThreatGrid

ThreatGrid is a dynamic malware analysis sandboxing service that detonates suspicious files to analyze behavior, not a feature that tracks file movement within an environment.

Concept tested: Cisco AMP Trajectory file movement tracking

Source: https://www.cisco.com/c/en/us/products/security/amp-for-endpoints/index.html

Topics

#AMP for Endpoints#file trajectory#malware tracking#endpoint security

Community Discussion

No community discussion yet for this question.

Full 700-765 Practice