700-765 · Question #67
Which is a key feature that Advanced Malware Protection provides?
The correct answer is C. Retrospective Security. Cisco Advanced Malware Protection (AMP) is distinguished by its Retrospective Security capability, which continuously tracks file behavior after initial inspection to catch threats that evade point-in-time detection.
Question
Which is a key feature that Advanced Malware Protection provides?
Options
- ADynamic Content Analysis
- BReputation Analytics
- CRetrospective Security
- DDynamic URL Filtering
How the community answered
(36 responses)- A3% (1)
- B6% (2)
- C92% (33)
Why each option
Cisco Advanced Malware Protection (AMP) is distinguished by its Retrospective Security capability, which continuously tracks file behavior after initial inspection to catch threats that evade point-in-time detection.
Dynamic Content Analysis is a feature associated with Cisco web security proxies (WSA/Secure Web Appliance) for inspecting web content, not a primary AMP capability.
Reputation Analytics is one input into AMP's file disposition engine but is not the key differentiating feature that sets AMP apart from traditional antivirus.
Retrospective Security is the defining feature of AMP because it maintains a continuous relationship with every file seen on an endpoint. If a file that was initially deemed safe later exhibits malicious behavior or new threat intelligence identifies it as malware, AMP can retroactively alert on and remediate the threat, closing the gap that point-in-time solutions leave open.
Dynamic URL Filtering is a web gateway feature used to categorize and block URLs, unrelated to endpoint malware analysis.
Concept tested: Cisco AMP retrospective file analysis capability
Source: https://www.cisco.com/c/en/us/products/security/advanced-malware-protection/index.html
Topics
Community Discussion
No community discussion yet for this question.