Upon detecting a flagrant threat on an endpoint, which two technologies instruct Cisco Identity Services Engine to contain the infected endpoint either manually or automatically? (Choose two.)
Suggested Answer: C, D
Get Premium 300-710 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
8 comments · newest first
DI
Diane
12 months ago
I had no idea Cisco AMP could do that!
CH
Charolette
12 months ago
A and C are correct, no doubt about it!
DU
Dulce
1 year ago
Wait, isn't D also involved in threat detection?
RO
Roosevelt
1 year ago
I think B is also a solid choice, but not sure about A.
YO
Yong
1 year ago
Definitely A and C! Those are the go-tos for containment.
ME
Melina
1 year ago
I'm leaning towards option C - create a custom service account and use the IAM disableServiceAccountKeyCreation policy. That way, we can control the service account and prevent unauthorized access to the credentials.
DA
Dalene
1 year ago
This seems like a straightforward question about failure modes. I'm pretty confident I can identify the correct answer.
SH
Shannan
1 year ago
Hmm, this is a tricky one. I need to make sure I understand the key characteristics of component testing before I can determine which option doesn't fit.