An administrator is adding a new URL-based category feed to the Cisco FMC for use within the policies. The intelligence source does not use STIX. but instead uses a .txt file format. Which action…

The correct answer is A. Add a URL source and select the flat file type within Cisco FMC. TID supports additional intelligence ingestion methods - With both Security Intelligence and TID, you can import threat intelligence into the system by either manually uploading flat files or configuring the system to retrieve flat files from a third-party host. TID provides…

Configuration

Question

An administrator is adding a new URL-based category feed to the Cisco FMC for use within the policies. The intelligence source does not use STIX. but instead uses a .txt file format. Which action ensures that regular updates are provided?

Options

AAdd a URL source and select the flat file type within Cisco FMC.
BUpload the .txt file and configure automatic updates using the embedded URL.
CAdd a TAXII feed source and input the URL for the feed.
DConvert the .txt file to STIX and upload it to the Cisco FMC.

How the community answered

(39 responses)

A
74% (29)
B
5% (2)
C
15% (6)
D
5% (2)

Explanation

TID supports additional intelligence ingestion methods - With both Security Intelligence and TID, you can import threat intelligence into the system by either manually uploading flat files or configuring the system to retrieve flat files from a third-party host. TID provides increased flexibility in managing those flat files. In addition, TID can retrieve and ingest intelligence provided in Structured Threat Information eXpression (STIX™) format. Files must be ASCII text files with one observable value per line guide-v622/threat_intelligence_director_tid.pdf

Topics

#Cisco FMC#Threat Intelligence#Feed Configuration#Flat File Format

Community Discussion

No community discussion yet for this question.

Full 300-710 Practice