nerdexam
Cisco

700-765 · Question #63

Which are two main features of Advanced Malware Protection? (Choose two.)

The correct answer is B. Leverages Global Threat Intelligence to provide zero-day protection C. Threat protection across the entire attack continuum. Cisco Advanced Malware Protection (AMP) is defined by its use of global threat intelligence for zero-day protection and its coverage across the full attack continuum.

Cisco Security Product Solutions

Question

Which are two main features of Advanced Malware Protection? (Choose two.)

Options

  • ARapid App Containment
  • BLeverages Global Threat Intelligence to provide zero-day protection
  • CThreat protection across the entire attack continuum
  • DUser and Entity Behavior Analytics

How the community answered

(25 responses)
  • A
    8% (2)
  • B
    88% (22)
  • D
    4% (1)

Why each option

Cisco Advanced Malware Protection (AMP) is defined by its use of global threat intelligence for zero-day protection and its coverage across the full attack continuum.

ARapid App Containment

Rapid App Containment is not a core AMP feature; endpoint isolation and containment capabilities are associated with endpoint detection and response (EDR) platforms.

BLeverages Global Threat Intelligence to provide zero-day protectionCorrect

AMP leverages the Cisco Talos global threat intelligence feed to identify and block zero-day threats that lack existing signatures, enabling proactive protection.

CThreat protection across the entire attack continuumCorrect

AMP operates across the entire attack continuum - before, during, and after an attack - providing prevention, detection, and retrospective analysis to address threats at every stage.

DUser and Entity Behavior Analytics

User and Entity Behavior Analytics (UEBA) is a feature of SIEM and network traffic analysis platforms such as Cisco Stealthwatch, not AMP.

Concept tested: Cisco AMP core features and attack continuum coverage

Source: https://www.cisco.com/c/en/us/products/security/advanced-malware-protection/index.html

Topics

#AMP#Global Threat Intelligence#zero-day protection#attack continuum

Community Discussion

No community discussion yet for this question.

Full 700-765 Practice