Implementing Cisco SD-WAN Solutions (ENSDWI) — Question 146

A Cisco SD-WAN customer has a requirement to calculate the SHA value for files as they pass through the device to see the returned disposition and determine if the file is good, unknown, or malicious. The customer also wants to perform real-time traffic analysis and generate alerts when threats are detected. Which two
Cisco SD-WAN solutions meet the requirements? (Choose two.)

Answer options

• A. Cisco Threat Grid
• B. Cisco Trust Anchor Module
• C. Cisco AMP
• D. Cisco Secure Endpoint
• E. Cisco Snort IPS

Correct answer: C, E

Explanation

Cisco AMP (Advanced Malware Protection) provides file analysis and threat detection capabilities, making it suitable for calculating SHA values and assessing file safety. Cisco Snort IPS (Intrusion Prevention System) is effective in real-time traffic analysis and alert generation when threats are identified, fulfilling the customer's requirements. The other options do not specifically address both the SHA value calculation and real-time traffic analysis as needed.