300-415 Question 224
Single answerAn enterprise is deploying Cisco SD-WAN and wants to enable AMP (Advanced Malware Protection) on the network to protect against malicious files downloaded over the internet. What is a key requirement for ensuring AMP functions properly in the SD-WAN environment?
- A
Enable Cisco Umbrella integration on the SD-WAN fabric.
- B
Ensure that the vSmart controllers are configured to inspect file content for AMP.
- C
Deploy a supported security policy on the vEdge or cEdge routers.
- D
Configure file reputation and file analysis services in the Cisco SD-WAN vManage dashboard.
Show answer and explanation
Correct answer: D
Explanation
AMP in Cisco SD-WAN requires the configuration of file reputation and file analysis services through the vManage dashboard. This enables the inspection of file downloads and provides malware protection capabilities. Other options either provide unrelated security features or involve components that do not handle AMP-related tasks.
- A. Incorrect.
Enabling Cisco Umbrella integration provides DNS-layer security but does not directly enable AMP. AMP focuses on file reputation and analysis, not DNS security.
- B. Incorrect.
The vSmart controllers do not inspect file content or perform AMP-related functions. They primarily handle policy distribution and orchestration.
- C. Incorrect.
Deploying a supported security policy is necessary for enabling features like IPS/IDS, but AMP requires additional configuration for file reputation and analysis.
- D. Correct.
Configuring file reputation and file analysis services in the Cisco SD-WAN vManage dashboard is a key requirement to enable AMP functionality. This ensures that files are analyzed for malware and threats.