300-710 Question #206: Real Exam Question with Answer & Explanation

Question

The CIO asks a network administrator to present to management a dashboard that shows custom analysis tables for the top DNS queries URL category statistics, and the URL reputation statistics. Which action must the administrator take to quickly produce this information for management?

Options

• ARun the Attack report and filter on DNS to show this information.
• BCreate a new dashboard and add three custom analysis widgets that specify the tables needed.
• CModify the Connection Events dashboard to display the information in a view for management.
• DCopy the intrusion events dashboard tab and modify each widget to show the correct charts.

Explanation

To present custom analysis tables for specific DNS and URL statistics, the administrator should create a new dashboard and add custom analysis widgets configured to display the required data. This allows for a tailored view precisely matching the CIO's request.

Common mistakes.

• A. Running a pre-defined "Attack report" and filtering would provide a snapshot of specific attack-related data, but it may not offer the custom analysis tables and specific URL category/reputation statistics requested for a dashboard view.
• C. Modifying an existing dashboard like "Connection Events" might disrupt views used by other teams and may not offer the flexibility to create multiple distinct custom analysis tables as easily as starting fresh.
• D. Copying the "intrusion events dashboard tab" and modifying widgets would be a convoluted approach, as intrusion events are distinct from DNS/URL statistics and modifying each widget would be less efficient than creating new custom ones.

Concept tested. Cisco FMC custom dashboards and widgets

Reference. https://www.cisco.com/c/en/us/td/docs/security/firepower/640/configuration/guide/fpmc-config-guide-640/dashboards_and_widgets.html

No community discussion yet for this question.