nerdexam
Cisco

700-765 · Question #90

Which of AMP's File capabilities deals with the problem of files passing through perimeter defenses that are later discovered to be a threat?

The correct answer is D. File Retrospection. Tracks the spread of any file within your network and continuously monitors file reputation over time. If a file reputation changes to malicious or is found by file sandboxing to be malicious, AMP provides retrospective alerting in the after phase. AMP identifies every instance…

Cisco Security Product Solutions

Question

Which of AMP's File capabilities deals with the problem of files passing through perimeter defenses that are later discovered to be a threat?

Options

  • ADynamic Analytics
  • BTrajectory
  • CMalware Security
  • DFile Retrospection

How the community answered

(25 responses)
  • A
    4% (1)
  • B
    8% (2)
  • D
    88% (22)

Explanation

Tracks the spread of any file within your network and continuously monitors file reputation over time. If a file reputation changes to malicious or is found by file sandboxing to be malicious, AMP provides retrospective alerting in the after phase. AMP identifies every instance of the file within your network to address the problem of malicious files passing through perimeter defenses that are later deemed a threat. ScanCenter_Administrator_Guide/b_ScanCenter_Administrator_Guide_chapter_011101.pdf

Topics

#AMP#file retrospection#post-breach detection#perimeter defense

Community Discussion

No community discussion yet for this question.

Full 700-765 Practice