Exam 350-701 topic 1 question 130 discussion

should be A

Please, see Drag and Drop question 110 as well. so it should be A

networkexpert 12 months ago - gots a point: Please, see Drag and Drop question 110 as well. so it should be A

I would go with B. user login suspicious behavior. The Cisco Tetration platform uses behavior-based anomaly detection to learn the normal behavior of users, applications, and network traffic, and to identify deviations from that normal behavior that may indicate a security threat. One of the behaviors that it looks for is user login suspicious behavior, such as repeated failed login attempts or login attempts from unusual locations or at unusual times. By analyzing these patterns of behavior, the platform can establish a baseline for normal user behavior and identify deviations that may indicate a potential security threat. Once an anomaly is detected, the platform can take action to mitigate the threat and prevent it from causing damage to the network or applications.

File access from a different user: Cisco Secure Workload platform learns the normal behavior of which file is accessed by which user. https://www.cisco.com/c/en/us/products/collateral/data-center-analytics/tetration-analytics/white-paper-c11-740380.html

Should be A no ! Its A ! https://www.cisco.com/c/en/us/products/collateral/data-center-analytics/tetration-analytics/datasheet-c78-737256.html

Anwer: A Table 1. Cisco Tetration platform primary features and benefits Feature Benefit Zero-trust model using microsegmentation ● Cisco Tetration platform allows only the required traffic between application components and users, blocking everything else. This approach prevents a persistent threat from entering or searching for additional vulnerabilities. Also allows for micro segmentation so you can deny file access from different users. https://cdw-prod.adobecqms.net/content/dam/cdw/on-domain-cdw/brands/cisco/data-center-tetration-data-sheet.pdf

What about b.If a user login from a US location and after 10 min the same user tries to login for Asia.

i really dont get the question. https://www.cisco.com/c/en/us/products/collateral/data-center-analytics/tetration-analytics/white-paper-c11-740380.html#CiscoSecureWorkloadplatformandapplicationbehaviorallowedlisting So SecureWorkload (Tetration) uses all of them but B C and D is not a "learning" machanism of users behavior while A is?