Which Cisco AMP feature allows an engineer to look back to trace past activities, such as file and process activity on an endpoint?

A. endpoint isolation

B. retrospective security

C. advanced search

D. advanced investigation








 

Suggested Answer: B



This question is in 350-701 exam 
For getting CCNP Security Certificate


Disclaimers:
The website is not related to, affiliated with, endorsed or authorized by Cisco.
Trademarks, certification & product names are used for reference only and belong to Cisco.