Exam 350-701 topic 1 question 452 discussion

Agree With you Cisco Umbrella and Cisco Cloudlock work together to secure access to the internet and usage of cloud apps. As a cloud-delivered service, Umbrella provides the first line of defense against threats on the internet, wherever users go. It provides organizations the visibility needed to protect internet access across all network devices, office locations, and roaming users. With Umbrella, customers can stop malware infections earlier, identify already-infected devices faster and prevent data exfiltration. Cisco Cloudlock is a Cloud Access Security Broker (CASB) that helps organizations to secure their identities, data, and applications in the cloud. It provides visibility and control over global cloud activities, enabling organizations to know who is doing what in their cloud applications, protecting against compromised accounts, insider threats, and malware. Cloudlock helps organizations identify and respond to data exposures and leakages as well as privacy and compliance violations.

Now, I reconsidered my answer. Stealthwatch is good for visibility, but doesn't provide protection. Umbrella might be a closer answer, as it prevents exfiltration

Of course, you can only choose one answer though lol.... My first choice would be: Cisco Cloudlock The key phrases that stood out for me were ...."visibility into DATA transfers as well as protection against DATA exfiltration". And as stated already - anything to do with DATA transfer monitoring and enforcing DATA access policies to prevent unauthorized DATA exfiltration from cloud platfroms - Cisco Cloudlock has the upper hand - hands down.

PROOF1: https://cisco.bravais.com/s/169ZRg2tWIOXb0uBjfWX Customer situation A company or organization’s most valuable assets include its intellectual property, confidential information, and information stored in its networks. Data breaches cost millions of dollars, and proper mitigation can prevent this and the loss of trust that can follow. Solution: The Cisco Stealthwatch® Exfiltration alarms track Inside Hosts and Outside Hosts to which an abnormal amount of data has been transferred. If a host triggers a number of these events and exceeds a configured threshold, it results in a Data Exfiltration alarm

PROOF2 https://cisco.bravais.com/s/15jOM9fFMK78ei07JnYK Customer situation As the attack landscape changes, network security becomes increasingly difficult. Cloud networks are growing in popularity, making it even more challenging for security teams to plan and execute security strategies. One of the key threats to network security is data exfiltration, which can be carried out manually by a user on the network, or by an automated process using a malicious program. Solution: Cisco Stealthwatch® has ways to detect data exfiltration attacks facing on-premise networks. For protection against data exfiltration in a cloud environment, Stealthwatch Cloud uses dynamic learning and entity modeling to provide similar detection. Stealthwatch Cloud monitors the cloud network and alerts on possible data exfiltration.