700-765 · Question #70
Which Cisco solution falls under Advanced Threat?
The correct answer is C. Stealthwatch. Cisco Stealthwatch (now Secure Network Analytics) is classified under Cisco's Advanced Threat category, using behavioral analytics and NetFlow telemetry to detect threats inside the network.
Question
Which Cisco solution falls under Advanced Threat?
Options
- AUmbrella
- BIdentity Services Engine
- CStealthwatch
- DThreat Grid
How the community answered
(34 responses)- A3% (1)
- B6% (2)
- C88% (30)
- D3% (1)
Why each option
Cisco Stealthwatch (now Secure Network Analytics) is classified under Cisco's Advanced Threat category, using behavioral analytics and NetFlow telemetry to detect threats inside the network.
Cisco Umbrella falls under the Cloud Security category, providing DNS-layer protection and CASB capabilities rather than internal network threat detection.
Identity Services Engine (ISE) is an identity and access management and network access control solution, categorized under Zero Trust and Network Security rather than Advanced Threat.
Cisco Stealthwatch analyzes NetFlow and telemetry data across the network using machine learning and behavioral modeling to detect advanced threats such as command-and-control activity, data exfiltration, and insider threats. It is placed in Cisco's Advanced Threat portfolio because it focuses on detecting threats that have already bypassed perimeter defenses. Its ability to analyze encrypted traffic without decryption further distinguishes it as an advanced threat detection platform.
Cisco Threat Grid is a malware analysis and threat intelligence platform; while related to threat analysis, Stealthwatch is specifically designated as the Advanced Threat network detection and response product in this exam context.
Concept tested: Cisco Advanced Threat portfolio product classification
Source: https://www.cisco.com/c/en/us/products/security/stealthwatch/index.html
Topics
Community Discussion
No community discussion yet for this question.