200-901 Question 72
Select 3Your organization is utilizing Cisco Umbrella for DNS-layer security, Cisco Firepower for intrusion prevention, and SecureX for extended detection and response (XDR). Which of the following capabilities can you leverage to streamline threat investigation and response across these platforms?
- A
Centralized visibility and correlation of threats across Cisco security products using SecureX
- B
Automated threat blocking at the DNS layer using Cisco Umbrella
- C
Real-time policy enforcement and intrusion detection using Cisco Firepower
- D
Automated API-based orchestration across Cisco and third-party security tools using SecureX
- E
Direct endpoint remediation without requiring network-level intervention using Cisco Umbrella
Show answer and explanation
Correct answers: A, B, D
Explanation
The correct answers include capabilities that streamline threat investigation and response across Cisco security platforms. SecureX offers centralized visibility, correlation, and orchestration across different tools, while Cisco Umbrella provides proactive threat blocking at the DNS layer. Together, these tools work in tandem to enhance security operations across an organization. However, direct endpoint remediation and real-time policy enforcement are not cross-platform features relevant to this scenario.
- A. Correct.
SecureX provides centralized visibility and correlation of threats across Cisco security products, enabling faster and more streamlined investigations. This is a key capability of SecureX.
- B. Correct.
Cisco Umbrella provides automated threat blocking at the DNS layer, which helps prevent malicious connections before they reach the network. This is a critical feature of Umbrella.
- C. Incorrect.
While Cisco Firepower provides real-time policy enforcement and intrusion detection, this capability is specific to Firepower and does not streamline threat investigation across platforms.
- D. Correct.
SecureX enables automated API-based orchestration across Cisco and third-party tools, facilitating rapid responses and integration for security operations. This is a valid capability.
- E. Incorrect.
Cisco Umbrella does not provide direct endpoint remediation; its focus is on DNS-layer security and not on endpoint-specific actions.