Q11Malware DefenseMultiple answers
Which two advantages does AMP provide over the other scanning engines on the Cisco WSA? (Choose two.)
Select 2 answers.
← → navigate · a answer
Community votes
Discussion · 5
5
From the manual, B and E seem right
Advanced Malware Protection protects against zero-day and targeted file-based threats by:
https://www.cisco.com/c/en/us/td/docs/security/wsa/wsa11-0/user_guide/b_WSA_UserGuide/b_WSA_UserGuide_chapter_010001.html
2
A cannot be because the question says advantage, so every antivirus can detect malware. But the real advantages of AMP are that if you update your siganature data base in real time you can detect zero day attacks from a recent update and the sanboxing, B is correct. And also E, protection against targeted file-based attacks, because these attacks can change the behaivor, so AMP with retroscpective can detect this threats
1
According to the document, it should be A and D.
1
Should be A and B after checking. Anti-virus mainly for endpoints according to the document:
"Antivirus Engine: Perform offline and system-based detections, including rootkit scanning, to complement Cisco’s advanced endpoint protection capabilities such as local IOC scanning, and device and network flow monitoring. The engine can be enabled and used by customers that want to consolidate their antivirus and advanced endpoint protection in one agent."
B, E 1
Selected Answer: BE
B and E