Exam 350-701 topic 1 question 370 discussion

I don't like A for it will provide static analysis, but only on attachments. The answer dosn't specify what its used for. though I am assuming static algorithm is referring to analysis.

https://www.avantec.ch/wp-content/uploads/2019/09/cisco-advanced-phishing-protection-datasheet.pdf

B&C is correct

https://www.cisco.com/c/en/us/td/docs/security/ces/user_guide/esa_user_guide_13-5/b_ESA_Admin_Guide_ces_13-5/m_advanced_phishing_protection.pdf After the analysis, potentially malicious messages are remediated from the recipient mailbox automatically, based on the pre-configured policies on the AdvancedPhishingProtection cloud service Set up the email gateway as a sensor engine on the Cisco Advanced Phishing Protection cloud service. This deploys the email gateway as a lightweight sensor via the cloud or on-premise.

B & C is correct: https://www.cisco.com/c/en/us/td/docs/security/esa/esa13-5/user_guide/b_ESA_Admin_Guide_13-5/m_advanced_phishing_protection.html

The following are the benefits of deploying Cisco Advanced Phishing Protection on the email gateway: The Sensor-based solution can be rapidly deployed to ensure that your users are fully protected from damaging breaches. Provides another layer of defense to more effectively secure your email environment. Gain a real-time understanding of senders, learn, and authenticate email identities and behavioral relationships to protect against BEC attacks. Automatically remove malicious emails from the recipient’s inbox and calls out identity deception techniques to prevent wire fraud or other advanced attacks. Get detailed visibility into email attack activity, including total messages secured and attacks prevented. Prevents the following: Attacks that use compromised accounts and social engineering. Phishing, ransomware, zero-day attacks and spoofing. BEC with no malicious payload or URL.

https://www.cisco.com/c/en/us/td/docs/security/esa/esa13-5/user_guide/b_ESA_Admin_Guide_13-5/m_advanced_phishing_protection.html

B and C should be the correct answers. Web activity has nothing to do with phishing. Phishing is related mainly to email and user action.

I vote for BC

it's B,C

I agree, see https://www.google.com/url?sa=t&rct=j&q=&esrc=s&source=web&cd=&ved=2ahUKEwjwzJvH1uD7AhVk_rsIHYeqA-gQFnoECAwQAQ&url=https%3A%2F%2Fwww.cisco.com%2Fc%2Fdam%2Fen%2Fus%2Ftd%2Fdocs%2Fsecurity%2Fphishing_protection-and-domain_protection%2Fapp_user_guide.pdf&usg=AOvVaw2fBkfoesBIKF-XcOMBqN-Y

Choose B & C