nerdexam
Cisco

700-765 · Question #67

Which is a key feature that Advanced Malware Protection provides?

The correct answer is C. Retrospective Security. Cisco Advanced Malware Protection (AMP) is distinguished by its Retrospective Security capability, which continuously tracks file behavior after initial inspection to catch threats that evade point-in-time detection.

Cisco Security Product Solutions

Question

Which is a key feature that Advanced Malware Protection provides?

Options

  • ADynamic Content Analysis
  • BReputation Analytics
  • CRetrospective Security
  • DDynamic URL Filtering

How the community answered

(36 responses)
  • A
    3% (1)
  • B
    6% (2)
  • C
    92% (33)

Why each option

Cisco Advanced Malware Protection (AMP) is distinguished by its Retrospective Security capability, which continuously tracks file behavior after initial inspection to catch threats that evade point-in-time detection.

ADynamic Content Analysis

Dynamic Content Analysis is a feature associated with Cisco web security proxies (WSA/Secure Web Appliance) for inspecting web content, not a primary AMP capability.

BReputation Analytics

Reputation Analytics is one input into AMP's file disposition engine but is not the key differentiating feature that sets AMP apart from traditional antivirus.

CRetrospective SecurityCorrect

Retrospective Security is the defining feature of AMP because it maintains a continuous relationship with every file seen on an endpoint. If a file that was initially deemed safe later exhibits malicious behavior or new threat intelligence identifies it as malware, AMP can retroactively alert on and remediate the threat, closing the gap that point-in-time solutions leave open.

DDynamic URL Filtering

Dynamic URL Filtering is a web gateway feature used to categorize and block URLs, unrelated to endpoint malware analysis.

Concept tested: Cisco AMP retrospective file analysis capability

Source: https://www.cisco.com/c/en/us/products/security/advanced-malware-protection/index.html

Topics

#AMP#retrospective security#malware protection#endpoint security

Community Discussion

No community discussion yet for this question.

Full 700-765 Practice