Exam 350-701 topic 1 question 288 discussion

Actual exam question from Cisco's 350-701

Question #: 288
Topic #: 1

An organization wants to provide visibility and to identify active threats in its network using a VM. The organization wants to extract metadata from network packet flow while ensuring that payloads are not retained or transferred outside the network. Which solution meets these requirements?

A. Cisco Umbrella Cloud
B. Cisco Stealthwatch Cloud PNM
C. Cisco Stealthwatch Cloud PCM
D. Cisco Umbrella On-Premises

Show Suggested Answer

Suggested Answer: B 🗳️

by NikoNiko at July 14, 2022, 6:30 p.m.

Comments

Submit Cancel

NikoNiko

Highly Voted 11 months ago

“PNM” = Private Network Monitoring “PCM” = Public Cloud Monitoring https://www.cisco.com/c/dam/en_us/about/doing_business/legal/msla_direct/swatch.pdf Secure Cloud Analytics formerly known as Stealthwatch Cloud PNM provides visibility and security monitoring for on-premises infrastructure. The solution detects advanced threats and early indicators of compromise by identifying all the entities in the network, modeling network behavior and alerting on behavioral anomalies that are security relevant and should be investigated. This includes a virtual appliance(s) that is installed locally in the network to collect IP metadata, such as Netflow, generated by your switches, routers and firewalls, additionally it can generate flow records by attaching to network ports. The virtual appliance transmits the locally collected data to the service where an advanced model is kept for every entity. https://azuremarketplace.microsoft.com/en/marketplace/apps/cisco.stealthwatch_private_network_monitoring_contract?tab=Overview

upvoted 15 times

NikoNiko

11 months ago

So as monitoring of private on-prem network is required, Cisco Stealthwatch Cloud PNM is the correct answer.

upvoted 5 times

...