easyMultiple ChoiceObjective-mapped
200-201 Practice Question: Which Cisco tool provides network-wide visibility…
Which Cisco tool provides network-wide visibility and can detect anomalies using NetFlow and behavioral analysis?
⚠ Common exam trap
Watch out — candidates often confuse a device that generates NetFlow data (like a Catalyst switch) with a tool that analyzes NetFlow data for security anomalies, leading them to select the switch instead of the dedicated analytics platform.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Cisco Secure Network Analytics (Stealthwatch)
Cisco Secure Network Analytics (formerly Stealthwatch) is the correct answer because it is a dedicated network visibility and security analytics platform that leverages NetFlow, IPFIX, and other telemetry sources to perform behavioral analysis and detect anomalies across the entire network. Unlike a firewall or switch, its primary function is to ingest flow data and apply machine learning models to identify threats such as lateral movement, data exfiltration, and command-and-control traffic.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Cisco Firepower Threat Defense (FTD)
Why it's wrong here
FTD is a firewall and IPS.
- ✗
Cisco Catalyst 9300 Switch
Why it's wrong here
A switch is not a security monitoring tool.
- ✗
Cisco Identity Services Engine (ISE)
Why it's wrong here
ISE focuses on authentication and policy enforcement.
- ✓
Cisco Secure Network Analytics (Stealthwatch)
Why this is correct
It uses NetFlow and behavioral analysis for anomaly detection.
Go deeper
Related to this question
About these practice questions
This 200-201 question is part of Courseiva's 979-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 200-201 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 200-201 exam.