500-651 Security Architecture for Systems Engineer (SASE) Questions and Answers

Threat analysis through network behavior analysis

Protecting against Zero-Day attacks

Layer-4 traffic monitoring across platforms

Vulnerability-ba sed threat management

Umbrella

Cognitive Threat Analytics

Cloudlock

Investigate

Supports High Availability

Support for profiling devices

Supports dynamic routing protocols such a s OSPF or BGP

Support for Platform exchange grid

Support for High Bandwith environments

Support for integrated posture assessment

Rapid threat detection through NGFW and NGFWv

Enforced device security with Meraki

URL filtering

Relationship segmentation

Automated policy enforcement with ASAv

Clientless tagging

File retrospection

Full VX LAN support

File reputation

Providing content analysis

Instant visibility

Dynamic outbreak considerations

Ability to filter in real-time

Securing the entire infrastructure

Stopping data breaches across campuses and branches

Protect data across multiple cloud applications

Monitoring file behavior across a large set of endpoints

Understanding what our users are doing online

Centralized policy management

Context-aware access

Patch management

Platform exchange grid

90% of cyber criminals use DNS in attacks

Protecting against data centers

Cyber Crime is a growing industry

Securing could apps

Cisco Defense Orchstrator

Identity Services Engine

Umbrella

Cognitive Threat Analytics

Dynamic Content Analysis

Reputation Analytics

Retrospective Security

Dynamic URL Filtering

Antivirus Monitoring

Adware

Trojan Downloader

Outbreak Filters

Web Reputation

Phishing URL

Support for device onboarding

Users protected regardless of physical location

Fuzzy Fingerprinting

Detection of anomalous traffic

Controls and protections extended beyond VPN controls

Secure access extended to all users

Profiles devices connected to customer ’s network

Orchestrates security policy management form one place

Consolidates configuration management

Protects customer’s network against zero-day attacks

Enhancing remediation operations

Having the fastest threat identification

Automating the security intelligence updates

Their ability to keep customers networks more secure and make IT more productive.

Cisco NGFW

Cisco Defense Orchestrator

Cisco AMP

Cloud Cloudlock

Growing IT staff requirements

Employees are unable to work remotely

Frequent hardware updates

Manual upgrade cycles

Threats are becoming too advanced for traditional hardware

Businesses are using email too frequently

Resolves all DNS request s through a single recursive DNS service

Retrospective Analysis

Acts as first level of protection by providing security at DNS layer

Provides visibility into all Internet activity

Real-time sandboxing

Data Loss Prevention

Data Loss PreventionHaving the ability to remediate issues as they arrive

AMPSecuring cloud apps

Protecting against data centers

InvestigateDetecting issues in real-time

Umbrella

Identity Services Engine

Firepower Threat Defense

Cisco Defense Orchestrator

Cognitive Threat Analytics

Intrusion Analytics

AMP

Cisco Defense Orchestrator

NGIPSCisco

Cisco ThreatGrid

Antivirus Monitoring

Dynamic Content Analysis

Real-time Sandboxing Analysis

Visibility control

Threat Centric NAC

Profiling and feed services

Guest management

Cisco pxGrid

Basic Network Access AAA, 802.1X

It determines the scope and cause of an outbreak and tracks suspicious files

It searches for potential threats based on identified activities and behaviors

It isolates suspicious files and runs them in a sa ndbox environment to determine their authenticity

It analyses the data from suspicious files to provide a new level of threat intelligence