Exam 350-701 topic 1 question 515 discussion

The following are the benefits of deploying Cisco Advanced Phishing Protection on the email gateway: The Sensor-based solution can be rapidly deployed to ensure that your users are fully protected from damaging breaches. Provides another layer of defense to more effectively secure your email environment. Gain a real-time understanding of senders, learn, and authenticate email identities and behavioral relationships to protect against BEC attacks. Automatically remove malicious emails from the recipient’s inbox [[Answer B]] and calls out identity deception techniques to prevent wire fraud or other advanced attacks. Get detailed visibility into email attack activity, including total messages secured and attacks prevented. Prevents the following: Attacks that use compromised accounts and social engineering. (Answer A) Phishing, ransomware, zero-day attacks and spoofing. BEC with no malicious payload or URL.

A & B: https://www.cisco.com/c/dam/en/us/td/docs/security/phishing_protection-and-domain_protection/Do_Not_Use/app_user_guide.pdf

The Cisco Advanced Phishing Protection solution protects users in the following two ways: A. It prevents the use of compromised accounts and social engineering. B. It automatically removes malicious emails from users' inboxes.

C, D, E are not correct as they do not accurately describe the ways in which CAPP protects users. CAPP does not secure all passwords that are shared in video conferences, prevent trojan horse malware using sensors, or prevent all zero-day attacks coming from the Internet.

I choose A,B

A. It prevents use of compromised accounts and social engineering. B. It automatically removes malicious emails from users' inbox. Cisco Advanced Phishing Protection solution is designed to protect users from phishing attacks by preventing the use of compromised accounts and social engineering and automatically removing malicious emails from users' inbox. This helps to mitigate the risk of sensitive information being stolen or malicious software being installed on users' devices.

I prefer A, B

According to the link below it's A and B. What makes incorrect the option E in my opinion is the word "all", so I would go for A and B as the most correct ones. https://www.cisco.com/c/en/us/td/docs/security/esa/esa13-5/user_guide/b_ESA_Admin_Guide_13-5/m_advanced_phishing_protection.html