300-710 · Question #226
Due to an Increase in malicious events, a security engineer must generate a threat report to include intrusion events, malware events, and security intelligence events. How Is this information…
The correct answer is D. Create a Custom report. To combine intrusion, malware, and security intelligence events into a single report, a security engineer must create a custom report within Cisco FMC.
Question
Due to an Increase in malicious events, a security engineer must generate a threat report to include intrusion events, malware events, and security intelligence events. How Is this information collected in a single report?
Options
- ARun the default Firepower report.
- BExport the Attacks Risk report.
- CGenerate a malware report.
- DCreate a Custom report.
How the community answered
(26 responses)- A4% (1)
- B12% (3)
- C4% (1)
- D81% (21)
Why each option
To combine intrusion, malware, and security intelligence events into a single report, a security engineer must create a custom report within Cisco FMC.
Running a default Firepower report typically provides pre-defined data views and may not include all specified event types in a consolidated manner.
Exporting an 'Attacks Risk' report would focus on attack-related data, not necessarily encompassing all intrusion, malware, and security intelligence events in one comprehensive view.
Generating a malware report would concentrate only on malware events, omitting intrusion and security intelligence events.
Creating a Custom report in Cisco Firepower Management Center (FMC) allows a security engineer to define specific data types, apply filters, and consolidate information from various event categories, such as intrusion events, malware events, and security intelligence events, into a single, tailored report format.
Concept tested: Cisco FMC custom reporting capabilities
Source: https://www.cisco.com/c/en/us/td/docs/security/firepower/7x/configuration/guide/fpmc-config-guide-70/reporting_and_event_analysis.html
Topics
Community Discussion
No community discussion yet for this question.