Exam 350-701 topic 1 question 258 discussion

Endpoint protection and machine learning would be AMP, but I can't find any corresponding information about pishing protection on endpoints and AMP. So the only answer left is A.

If question really is like this - about endpoint, then A

Ok so, the Secure Endpoint Datasheet does speak about machine learning but it seems to be for malware only. https://www.cisco.com/c/en/us/products/collateral/security/fireamp-endpoints/datasheet-c78-733181.html At no point it speaks about phishing, so it seems the only option would be A...

Not sure between A and B, but leaning toward B. A is signatures based.

Machine Learning & Endpoint??? would be correct for Machine Learning & ESA.

Machine Learning :)

my answer: B

It should be B

I agree with B

I agree with B, it is the only thing that makes sense. Machine Learning can be used to detect patterns of Phishing Mails, while Anti-Virus tools will not prevent this. How can an anti-virus tool stop you from inserting your credentials into a malicious website for example ? Machine learning tools could detect this by checking URLs and detect something like am4zon.com.

The Q Say the rol of the endpoint, but the answers don't Match with the Question

Picked A. The question is asking EPP, not EDR https://www.cisco.com/c/en/us/products/security/what-is-endpoint-protection-platform.html#~how-an-epp-works

It is B: Cisco Advanced Phishing Protection provides unprecedented insight into the email coming in to your organization, flowing out of your organization, and within your organization. Powered by Cisco Identity Intelligence – Cisco's unique machine learning techniques based on historical email traffic to your organization – Advanced Phishing Protection models the unique behavior of all legitimate email senders and allows you to quickly distinguish good messages from potentially bad messages. Coupled with Identity Intelligence, Cisco's platform of data – built from analyzing billions of email messages worldwide – provides you a risk overview of all messages in your organization and senders who send email into your organization.

I'd go with B here

The answer is right but the question looks wrong. Should be "the role of AMP for Endpoints" and not "the role of an endpoint". Endpoints do not have any role in protecting the user. Admins, appliances and the user himself do.

answer is A

Should be A