MENU
A network host is infected with malware by an attacker who uses the host to make calls for files and shuttle traffic to bots. This attack went undetected and resulted in a significant loss. The organization wants to ensure this does not happen in the future and needs a security solution that will generate alerts when command and control communication from an infected device is detected. Which network security solution should be recommended?
Suggested Answer: B
Get Premium 300-215 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
30 comments · newest first
GL
Gladys
11 months ago
C is more for email threats, not really the right fit here.
AM
Amalia
11 months ago
Surprised that people overlook the WSA, it can help too!
DA
Daniel
11 months ago
I’m not so sure about that, isn’t the ASA still pretty effective?
MI
Micheal
11 months ago
Totally agree, Firepower has great threat detection features!
AN
Anisha
12 months ago
I think B is the best choice for detecting C2 traffic.
RO
Rosendo
12 months ago
I believe the Secure Email Gateway is more for email threats, so it probably wouldn’t help with this specific issue. Firepower seems like the most appropriate option.
AL
Alisha
1 year ago
I’m a bit confused because I thought the Secure Web Appliance was more focused on web traffic filtering. Does it also handle command and control alerts?
CO
Corazon
1 year ago
I think Firepower might be the right choice since it has advanced threat detection capabilities. We practiced a similar question in class about network monitoring tools.
RO
Rolande
1 year ago
I remember we discussed how command and control detection is crucial for preventing malware from spreading, but I'm not sure which Cisco solution is best for that.
BA
Barbra
1 year ago
I feel pretty confident about this one. Based on the description of the attack, I think the Cisco Secure Firewall Threat Defense (Firepower) solution would be the best choice. It's designed for advanced threat detection and should be able to identify and alert on the command and control traffic.
AS
Asuncion
1 year ago
This is a tricky one. I'm going to need to really think through the capabilities of each solution to determine which one would be best suited for this scenario. The details about the malware and its communication patterns are important clues.
PH
Phung
1 year ago
Okay, I've got a strategy here. I'm going to think through each option and consider which one is most likely to have the capabilities to monitor for and alert on command and control communications. That should help me narrow it down.
KE
Kenneth
1 year ago
Hmm, I'm a bit unsure about this one. The options seem to cover different Cisco security products, but I'm not sure which one would be best for detecting and alerting on that type of malware activity.
JO
Johnson
1 year ago
This looks like a straightforward network security question. I think the key is to identify the solution that can detect and alert on command and control traffic from an infected device.
KR
Kristeen
2 years ago
You know, I've heard the Secure Firewall ASA can be pretty effective too. But with the whole command and control thing, Firepower is probably the way to go. Can't let those bots take over, am I right?
RE
Reuben
2 years ago
Haha, the Secure Web Appliance? Really? Might as well just roll out the red carpet for those hackers! Firepower is the clear choice here.
LA
Laine
2 years ago
User 3: Firepower will provide the necessary alerts to prevent future attacks.
IV
Ivan
2 years ago
User 2: Yeah, Secure Web Appliance seems like a risky choice.
CL
Claribel
2 years ago
User 1: I agree, Firepower is definitely the way to go.
HE
Hector
2 years ago
I agree with Coral. Option B) Cisco Secure Firewall Threat Defense (Firepower) sounds like the most effective solution to prevent such attacks in the future.
CO
Coral
2 years ago
I think option B) Cisco Secure Firewall Threat Defense (Firepower) would be the best choice. It can detect command and control communication from infected devices.
GA
Gail
2 years ago
I'd say the Secure Email Gateway is the way to go. Catching those malicious files before they even reach the network is a great first line of defense.
JA
Jani
2 years ago
D: That could work too, but preventing the files from even entering the network is key.
GU
Gussie
2 years ago
C: What about the Secure Firewall Threat Defense?
JE
Jeannetta
2 years ago
B: I agree, stopping malicious files at the email level is crucial.
GE
Gene
2 years ago
A: I think the Secure Email Gateway is a good choice.
KA
Karon
2 years ago
Definitely go with Firepower! It's the best solution for detecting command and control communications. Keeping those bots at bay is crucial.
LA
Lashon
2 years ago
C: Firepower is definitely the best choice for preventing attacks like this in the future.
EV
Eve
2 years ago
B: Absolutely, Firepower is top-notch for keeping those bots in check.
MA
Martina
2 years ago
A: I agree, Firepower is the way to go. It's essential for detecting those command and control communications.