300-215 Question 154
Single answerYour organization has recently experienced a surge in phishing attacks targeting employee credentials. As part of the incident response plan, you need to recommend a Cisco security solution that can both detect and prevent these types of attacks. Which of the following Cisco solutions would be most appropriate for addressing this issue?
- A
Cisco Umbrella
- B
Cisco Firepower Threat Defense (FTD)
- C
Cisco Secure Email
- D
Cisco Secure Network Analytics
Show answer and explanation
Correct answer: A
Explanation
Cisco Umbrella is the most appropriate solution for detecting and preventing phishing attacks because it operates at the DNS layer, which allows it to block connections to malicious domains before they can be accessed. This makes it an effective tool for both detection and prevention in this scenario.
- A. Correct.
Cisco Umbrella provides DNS-layer security, which can detect and block access to malicious domains used in phishing attacks. It is highly effective for protecting against phishing attempts.
- B. Incorrect.
Cisco Firepower Threat Defense (FTD) focuses on intrusion prevention, malware detection, and firewall capabilities. While it is effective for network security, it is not specifically designed to target phishing attacks at the DNS or email level.
- C. Incorrect.
Cisco Secure Email provides email security by filtering out spam and malicious attachments. However, it does not operate at the DNS layer, which is critical for detecting phishing domains.
- D. Incorrect.
Cisco Secure Network Analytics helps monitor network traffic for anomalies but does not directly address phishing attacks or provide prevention mechanisms specific to phishing.