350-201 Question 235
Select 3You are tasked with improving the efficiency of your organization’s incident response process by automating repetitive tasks. Using Cisco SecureX orchestration, which of the following actions can you automate to achieve this objective?
- A
Automatically isolate endpoints identified as compromised by Cisco Secure Endpoint.
- B
Schedule regular vulnerability scans using Cisco Secure Firewall.
- C
Send alerts to a Slack channel when a phishing email is detected.
- D
Generate compliance reports for audit purposes.
- E
Automatically block IP addresses flagged as malicious by Cisco Umbrella.
Show answer and explanation
Correct answers: A, C, E
Explanation
Cisco SecureX orchestration is designed to automate repetitive security tasks, such as isolating endpoints, sending notifications, and blocking malicious IPs. These actions improve incident response efficiency by reducing manual intervention and response time. However, tasks like scheduling vulnerability scans or generating compliance reports are outside the scope of SecureX orchestration and require other tools or manual processes.
- A. Correct.
Cisco SecureX orchestration allows for the automation of endpoint isolation workflows, making it possible to automatically isolate compromised endpoints as part of an incident response process.
- B. Incorrect.
While vulnerability scans are important, scheduling them typically involves tools like Cisco Vulnerability Management or third-party tools, not SecureX orchestration.
- C. Correct.
SecureX orchestration can integrate with collaboration tools like Slack to automate the process of sending alerts when phishing or other threats are detected.
- D. Incorrect.
Compliance report generation is generally handled by specific compliance tools or manual processes, and is not a direct use case for SecureX orchestration.
- E. Correct.
Cisco SecureX orchestration can automate workflows to block malicious IP addresses by leveraging threat intelligence from tools like Cisco Umbrella and applying it to network security controls.