What are two features of Cisco Secure Endpoint? (Choose two.)

Cisco Secure Endpoint (formerly AMP for Endpoints) is an Endpoint Protection Platform (EPP) and Endpoint Detection and Response (EDR) solution. Its core capabilities include providing deep visibility and control over endpoint activity. File Trajectory is a key feature that visually maps the path and propagation of a file across all protected endpoints, showing its origin and activity. Orbital Advanced Search is another integral feature that uses OSquery to allow security analysts to run complex queries on endpoints for proactive threat hunting and IT operations, providing granular visibility into the device's current state.

B. rogue wireless detection: This is a network security feature, typically handled by Wireless LAN Controllers (WLCs) or network management solutions like Cisco DNA Center, not an endpoint agent.
D. web content filtering: This is a primary function of a secure web gateway or cloud security service, such as Cisco Umbrella, not a core feature of Cisco Secure Endpoint.
E. full disk encryption: This is a data-at-rest protection mechanism typically provided by the operating system (e.g., BitLocker, FileVault) or specialized encryption software, not by an EDR solution.

1. Cisco Secure Endpoint Data Sheet. (2023). Cisco Systems

Inc. Under the "Key features and benefits" section

the document explicitly lists and describes:

File Trajectory: "Track the spread of malware across PCs

Macs

Linux

and mobile devices. The file trajectory view shows the malware’s origin and the path it has taken."

Orbital Advanced Search: "Orbital Advanced Search provides over 100 pre-canned queries to help you hunt for threats. It uses OSquery to get deep visibility into the state of your endpoints."

2. Cisco Secure Endpoint At-a-Glance. (2023). Cisco Systems

Inc. This document highlights core capabilities

including a diagram on page 2 that features "File Trajectory" as part of the "Visibility" pillar and "Orbital Advanced Search" as part of the "Threat Hunting" pillar.

3. Cisco Secure Endpoint User Guide. (Version 7.x). Cisco Systems

Inc. The guide contains dedicated chapters for major features.

The "Events" chapter details the use of File Trajectory to investigate file propagation.

A distinct chapter is dedicated to Orbital

explaining how to use its advanced search capabilities for threat hunting.