Secure Network Access Control - Next-Generation Endpoint Security
19 important questions on Secure Network Access Control - Next-Generation Endpoint Security
What is Cisco Talos?
Created from three security research teams:
1. IronPort Security Applications (SecApps)
2. The Sourcefire Vulnerability Research Teamt (VRT)
3. The Cisco Threat Research, analysis and communcations (TRAC) team.
What are 7 intelligence feeds that the Cisco Talos team receives information from?
2. The Advanced Malware Protection (AMP) community
3. ClamAV, Snort, Immunet, SpamCop, SenderBase, Threat Grid and Talos User communities
4. Honeypots
5. The Sourcefire Awareness Education, Guidance, and Intelligence Sharing (AEGIS)
6. Private and public threat feeds
7. Dynamic Analysis
What is Cisco Threat Grid?
- Higher grades + faster learning
- Never study anything twice
- 100% sure, 100% understanding
What is the Glovebox used for in Cisco Threat Grid?
What is Cisco Advanced Malware Protection?
- Before (Global threat intelligence from Cisco Talo and Cisco Threat Grid feeds into AMP to protect against known and new emerging threats.
- During (File reputation to determine wheter a file is clean or malicious as well as sandboxing are used to identify threats during an attack
- After (Cisco AMP provides Retrospection, Indicators of Compromise, Tracking, Analysis and surgical remediation.
What are the 3 main components of Cisco AMP?
2. AMP Connectors
3. Threat Intelligence from Cisco Talos and Cisco Threat Grid
What are 5 Cisco AMP Connectors?
2. AMP for Networks (NGFW, NGIPS, ISRs)
3. AMP for Email (ESA)
4. AMP for Web (WSA)
5. AMP for Meraki MX
What is Cisco Umbrella?
What is the Cisco Web Security Appliance (WSA)?
How can Cisco WSA be deployed?
What is Cisco Email Security Appliance (ESA)?
What are the 5 capabilities that an IPS system needs to be a Next-Generation IPS (NGIPS)?
2. Advanced threat protection
3. Intelligent Security Automation
4. Unparalleled performance and scalability
5. Application visibility and control (AVC) and URL Filtering
What Cisco device is capable of NGIPS?
What is Cisco Stealthwatch?
What are the 2 available Stealthwatch offerings?
2. Stealthwatch Cloud
What 3 components are required for Cisco Stealthwatch Enterprise?
2. Flow Collector
3. Stealthwatch Management Console (SMC)
What are the 2 options for Cisco Stealthwatch Cloud?
2. Private Network Monitoring
What is the Public Cloud Monitoring offering of Cisco Stealthwatch Cloud used for?
What is the Private Network Monitoring offering of Cisco Stealthwatch Cloud used for?
The question on the page originate from the summary of the following study material:
- A unique study and practice tool
- Never study anything twice again
- Get the grades you hope for
- 100% sure, 100% understanding