nerdexam
Cisco

300-710 · Question #226

Due to an Increase in malicious events, a security engineer must generate a threat report to include intrusion events, malware events, and security intelligence events. How Is this information…

The correct answer is D. Create a Custom report. To combine intrusion, malware, and security intelligence events into a single report, a security engineer must create a custom report within Cisco FMC.

Management and Troubleshooting

Question

Due to an Increase in malicious events, a security engineer must generate a threat report to include intrusion events, malware events, and security intelligence events. How Is this information collected in a single report?

Options

  • ARun the default Firepower report.
  • BExport the Attacks Risk report.
  • CGenerate a malware report.
  • DCreate a Custom report.

How the community answered

(26 responses)
  • A
    4% (1)
  • B
    12% (3)
  • C
    4% (1)
  • D
    81% (21)

Why each option

To combine intrusion, malware, and security intelligence events into a single report, a security engineer must create a custom report within Cisco FMC.

ARun the default Firepower report.

Running a default Firepower report typically provides pre-defined data views and may not include all specified event types in a consolidated manner.

BExport the Attacks Risk report.

Exporting an 'Attacks Risk' report would focus on attack-related data, not necessarily encompassing all intrusion, malware, and security intelligence events in one comprehensive view.

CGenerate a malware report.

Generating a malware report would concentrate only on malware events, omitting intrusion and security intelligence events.

DCreate a Custom report.Correct

Creating a Custom report in Cisco Firepower Management Center (FMC) allows a security engineer to define specific data types, apply filters, and consolidate information from various event categories, such as intrusion events, malware events, and security intelligence events, into a single, tailored report format.

Concept tested: Cisco FMC custom reporting capabilities

Source: https://www.cisco.com/c/en/us/td/docs/security/firepower/7x/configuration/guide/fpmc-config-guide-70/reporting_and_event_analysis.html

Topics

#Security Reporting#Custom Reports#Threat Analysis#Event Correlation

Community Discussion

No community discussion yet for this question.

Full 300-710 Practice