View all questions & answers for the Implementing and Operating Cisco Security Core Technologies v1.1 (350-701 SCOR v1.1) Exam Materials exam

Implementing and Operating Cisco Security Core Technologies v1.1 (350-701 SCOR v1.1) Exam Materials - Question #281 Discussion

Comment Image Comment Image Comment Image

Which endpoint protection and detection feature performs correlation of telemetry, files, and intrusion events that are flagged as possible active breaches? (Choose one answer)

  • A. indication of compromise
  • B. elastic search
  • C. retrospective detection
  • D. file trajectory
Correct Answer: A

Brave-Dump Community Votes

Answer: C (1 vote) 50%
Answer: A (1 vote) 50%

Community Explanations & Comments (2)

MANAR ABDALLAH HAMED 3 months ago
Selected: C
retrospective detection
Brave-Dumps.com Admin 3 months ago
no, A
Brave-Dumps.com Admin 3 months ago
Selected: A
A is the correct answer: Indicator of Compromise.

Reference: Cisco Secure Endpoint
https://www.cisco.com/c/dam/global/uk_ua/assets/pdfs/cisco-secure-endpoint.pdf
Page 64

Cisco states:

“File, telemetry, and intrusion events are correlated and prioritized as potentially active breaches, helping security teams identify malware incidents and connect them to coordinated attacks.”

This description directly refers to the Indicator of Compromise feature.