Implementing and Operating Cisco Security Core Technologies (SCOR) — Question 352
Which Cisco platform processes behavior baselines, monitors for deviations, and reviews for malicious processes in data center traffic and servers while performing software vulnerability detection?
Answer options
- A. Cisco Tetration
- B. Cisco ISE
- C. Cisco AnyConnect
- D. Cisco AMP for Network
Correct answer: A
Explanation
Cisco Tetration is designed to establish behavior baselines and monitor deviations in data center environments, making it suitable for detecting malicious processes and software vulnerabilities. Cisco ISE primarily focuses on identity and access management, while Cisco AnyConnect is a VPN client, and Cisco AMP for Network is focused on threat detection and response rather than baseline behavior analysis.