Cisco
700-765 · Question #67
700-765 Question #67: Real Exam Question with Answer & Explanation
The correct answer is C: Retrospective Security. Cisco Advanced Malware Protection (AMP) is distinguished by its Retrospective Security capability, which continuously tracks file behavior after initial inspection to catch threats that evade point-in-time detection.
Question
Which is a key feature that Advanced Malware Protection provides?
Options
- ADynamic Content Analysis
- BReputation Analytics
- CRetrospective Security
- DDynamic URL Filtering
Explanation
Cisco Advanced Malware Protection (AMP) is distinguished by its Retrospective Security capability, which continuously tracks file behavior after initial inspection to catch threats that evade point-in-time detection.
Common mistakes.
- A. Dynamic Content Analysis is a feature associated with Cisco web security proxies (WSA/Secure Web Appliance) for inspecting web content, not a primary AMP capability.
- B. Reputation Analytics is one input into AMP's file disposition engine but is not the key differentiating feature that sets AMP apart from traditional antivirus.
- D. Dynamic URL Filtering is a web gateway feature used to categorize and block URLs, unrelated to endpoint malware analysis.
Concept tested. Cisco AMP retrospective file analysis capability
Reference. https://www.cisco.com/c/en/us/products/security/advanced-malware-protection/index.html
Community Discussion
No community discussion yet for this question.