Exam 350-701 topic 1 question 499 discussion

Analysis of Other Options: A. Cisco Umbrella: Cisco Umbrella is a cloud-delivered security service that provides DNS-layer security and internet-wide visibility to protect against malware, phishing, and command and control callbacks. It does not provide patch management capabilities. B. Cisco ISE (Identity Services Engine): Cisco ISE is a network access control and policy enforcement platform that provides visibility and control over users and devices on the network. It focuses on access control and identity management rather than patch management. C. Cisco CloudLock: Cisco CloudLock is a cloud-native CASB (Cloud Access Security Broker) and cloud cybersecurity platform that helps secure data, meet compliance requirements, and monitor and control cloud applications. It does not focus on patch management.

the link from achille5, it states "baselines the installed software packages, package version, patch level, and more for every workload", the definition of patch management i believe is "Patch management is the process of applying firmware and software updates to improve functionality, close security vulnerabilities, and optimize performance." - the link does not say it applies firmware.. it states that it baselines.. - w that said.. im still confused as to what the right answer is

D is correct. Tetration = Cisco Secure Workload.

https://www.cisco.com/c/en/us/products/collateral/data-center-analytics/tetration-analytics/q-and-a-c67-737402.html

C. Cisco CloudLock is a security solution that provides patch management in the cloud. Cisco CloudLock is a cloud-based security solution that provides organizations with visibility and control over their cloud-based assets, such as SaaS apps, IaaS, and PaaS. It includes a feature called CloudLock Patch Management, which allows organizations to identify and remediate vulnerabilities in cloud-based assets, including software vulnerabilities, configuration issues, and missing patches. It also provides automated patching for cloud-based assets, which can help organizations to keep their cloud-based assets up-to-date and secure. In summary, Cisco CloudLock is a security solution that provides patch management in the cloud, it allows organizations to identify and remediate vulnerabilities in cloud-based assets, including software vulnerabilities, configuration issues, and missing patches, and also provides automated patching for cloud-based assets, which can help organizations to keep their cloud-based assets up-to-date and secure.

Im going with D on this one. ISE does not manage the cloud, Tetration (Secure Workloads) does. See link below: https://www.cisco.com/c/en/us/products/collateral/data-center-analytics/tetration-analytics/q-and-a-c67-737402.html The Cisco Secure Workload platform baselines the installed software packages, package version, patch level, and more for every workload. The platform maintains an up-to-date CVE data feed from multiple sources, including NIST and OS vendor data packs, which contain the latest vulnerability and exposure information. Using this, Secure Workload checks whether the software packages have known information security vulnerabilities. When a vulnerability is detected, complete details—including the severity and impact score—can be found. You can then quickly find all the servers with the same version of the package installed for patching and planning purposes.

i am not sure answwer is right, cloud lock can not do patch management on HOST I CHOOSE ISE,Answer B