Implementing and Operating Cisco Security Core Technologies (SCOR) — Question 447

What is a difference between Cisco AMP for Endpoints and Cisco Umbrella?

Answer options

• A. Cisco AMP for Endpoints is a cloud-based service, and Cisco Umbrella is not
• B. Cisco AMP for Endpoints automatically researches indicators of compromise and confirms threats and Cisco Umbrella does not
• C. Cisco AMP for Endpoints prevents, detects, and responds to attacks before damage can be done, and Cisco Umbrella provides the first line of defense against Internet threats
• D. Cisco AMP for Endpoints prevents connections to malicious destinations, and Cisco Umbrella works at the file level to prevent the initial execution of malware

Correct answer: C

Explanation

The correct answer is C because Cisco AMP for Endpoints is designed to actively prevent, detect, and respond to attacks, ensuring that damage is minimized. In contrast, Cisco Umbrella acts as a primary line of defense against online threats, focusing more on DNS and web traffic. The other options inaccurately describe the functionalities of these two solutions.