Implementing and Operating Cisco Security Core Technologies (SCOR) — Question 55

An organization is trying to improve their Defense in Depth by blocking malicious destinations prior to a connection being established. The solution must be able to block certain applications from being used within the network. Which product should be used to accomplish this goal?

Answer options

• A. Cisco Firepower
• B. Cisco Umbrella
• C. Cisco ISE
• D. Cisco AMP

Correct answer: B

Explanation

Cisco Umbrella is designed to block access to malicious destinations and can enforce application use policies, making it the correct choice. Cisco Firepower focuses on network security and threat defense, while Cisco ISE is primarily for identity and access management, and Cisco AMP is more about endpoint protection rather than proactive blocking of applications.