350-201 Question 165
Single answerYour organization has recently implemented Cisco SecureX to improve its security operations and automate processes. As a cybersecurity specialist, you are tasked with identifying a process that can benefit from automation to reduce response times during a malware incident. Which of the following processes would be the most appropriate to automate using Cisco SecureX?
- A
Enforcing password policies across all user accounts
- B
Automating the isolation of infected endpoints after detection
- C
Planning and conducting annual cybersecurity awareness training
- D
Reviewing and analyzing security logs manually for anomalies
Show answer and explanation
Correct answer: B
Explanation
During a malware incident, rapid response is crucial to minimize damage and prevent further spread. Automating endpoint isolation using Cisco SecureX allows for faster containment of the threat, making it the most appropriate process to automate in this situation. Other options are either unrelated to immediate incident response or are not processes that benefit from automation in the given context.
- A. Incorrect.
Enforcing password policies is primarily a compliance and administrative task that does not directly require immediate response during a malware incident.
- B. Correct.
Automating the isolation of infected endpoints after detection is a critical process that can significantly reduce response time and limit the spread of malware, making it the most appropriate option for automation in this scenario.
- C. Incorrect.
Planning and conducting annual cybersecurity awareness training is a strategic initiative, not a real-time response process, and thus not suitable for automation in this context.
- D. Incorrect.
Manually reviewing and analyzing security logs is time-consuming and labor-intensive, but automating it would not directly address the immediate need for response during a malware outbreak.