Cisco Updated 350-701 Exam Questions and Answers by cian

Explanation

The Stealthwatch Cloud Private Network Monitoring (PNM) Sensor is an extremely flexible piece of technology,

capable of being utilized in a number of different deployment scenarios. It can be deployed as a complete

Ubuntu based virtual appliance on different hypervisors (e.g. –VMware, VirtualBox). It can be deployed on

hardware running a number of different Linux-based operating systems.

Alert fatigue occurs when analysts receive excessive low-fidelity or poorly contextualized alerts that cannot be assessed efficiently. Alerts lacking sufficient context are more likely to be inaccurate, duplicated, or treated as isolated events, forcing analysts to spend time manually correlating telemetry and investigating false positives. Cisco XDR addresses this problem by collecting and correlating data across endpoints, email, networks, servers, and cloud workloads. That correlation adds context, prioritizes threats, and presents incidents rather than disconnected notifications. Reauthentication of one endpoint is an identity event, not a general cause of fatigue. Notifications from too few devices would reduce alert volume, while automatic policy enforcement is a response capability intended to reduce analyst workload. Consequently, option A is the only choice describing the underlying alert-quality problem. Cisco XDR overview