Exam 350-701 topic 1 question 20 discussion

Cisco® Advanced Phishing Protection provides sender authentication and BEC detection capabilities. It uses advance machine learning techniques, real time behavior analytics, relationship modeling and telemetry to protect against identity deception–based threats. answer should be B

Answer D is a red herring. It references identities perceived by the sender, but the Cisco docs point to "identities the recipient perceives". The correct answer is B. Again Cisco docs reference three areas of machine learning: https://www.cisco.com/c/dam/en/us/products/collateral/security/cloud-email-security/at-a-glance-c45-740894.pdf

Phishing Defense provides sender authentication and BEC detection capabilities. It uses advance machine learning techniques, real time behavior analytics, relationship modeling and telemetry to protect against identity deception–based threats. This intelligence continuously adapts to drive a real-time understanding of senders, prevent breaches and provide enhanced protection

Cisco Advanced Phishing Protection provides Business Email Compromise (BEC) and phishing detection capabilities. It detects identity deception-based threats by performing reputation checks on sender address by using advanced machine learning techniques and added intelligence. This intelligence continuously adapts to drive a real-time understanding of senders and provides enhanced protection. https://www.cisco.com/c/en/us/td/docs/security/esa/esa13-5/user_guide/b_ESA_Admin_Guide_13-5/m_advanced_phishing_protection.html

You can configure mail policies to enable forwarding of message metadata to the Cisco Advanced Phishing Protection cloud service. When you enable the Cisco AdvancedPhishingProtection cloud service on your email gateway, the following message headers are shared with the Cisco Advanced Phishing Protection Cloud service : • dkim_selector • last_hop_ip_address • helo_domain • dkim_result • dkim_domain • dmarc_result • dkim_signatures • to_header • header_subject • header_from • message_id • spf_result • rcpt_to • full_header_from • mail_from • Received-SPF • Received-Header • Authentication-Results • reply_to • original_sender • received-timestamps • Authentication-Results-original • X-originating-ip

Answer is B

B. It uses machine learning and real-time behavior analytics. Cisco Advanced Phishing Protection uses machine learning to identify and analyze patterns in email and other online communication, and can detect and block phishing attempts in real-time. It also uses behavior analytics to identify anomalies and suspicious activity, helping to protect users from phishing attacks. The solution also integrates threat intelligence and machine learning to detect new types of malicious emails, and it also uses a combination of techniques, including URL and attachment scanning, to detect and block phishing attacks.

Funny enough, as much as B sounds correct but the flaw with that answer is that Cisco Advanced Phishing Protection doesn't provide "real-time behavior analytics" it actually bases it's data according to historic email data sent to organization. Check out below statement from the cisco webpage The Advanced Phishing Protection engine on the email gateway checks the unique behavior of all legitimate senders, based on the historic email traffic to your organization. The cloud service interface of the Cisco Advanced Phishing Protection provides risk analysis to distinguish good messages from potentially malicious messages. https://www.cisco.com/c/en/us/td/docs/security/esa/esa13-5/user_guide/b_ESA_Admin_Guide_13-5/m_advanced_phishing_protection.html

Correct answer should be B

Advanced Phishing Protection uses advance machine learning techniques. Answer B

It should be B

Answer is B It detects identity deception-based threats by performing reputation checks on sender address by using advanced machine learning techniques and added intelligence. This intelligence continuously adapts to drive a real-time understanding of senders and provides enhanced protection. https://www.cisco.com/c/en/us/td/docs/security/esa/esa13-5/user_guide/b_ESA_Admin_Guide_13-5/m_advanced_phishing_protection.html

Answer is B Machine Learning

It should be B.

https://www.cisco.com/c/dam/en/us/products/collateral/security/cloud-email-security/at-a-glance-c45-740894.pdf "Determines which identities the recipient perceives is sending the message" - differ from this answer,

Wrong answer. It's all about machine learning.