An administrator needs to configure Cisco FMC to send a notification email when a data transfer larger than 10 MB is initiated from an internal host outside of standard business hours. Which Cisco…

The correct answer is D. correlation policy. Correlation policies allow you to correlate security events based on various criteria, including time of day, user, source/destination IP address, and more. When the specified criteria are met, the correlation policy can trigger a response action, such as sending an email…

Configuration

Question

An administrator needs to configure Cisco FMC to send a notification email when a data transfer larger than 10 MB is initiated from an internal host outside of standard business hours. Which Cisco FMC feature must be configured to accomplish this task?

Options

Afile and malware policy
Bapplication detector
Cintrusion policy
Dcorrelation policy

How the community answered

(15 responses)

A
13% (2)
C
7% (1)
D
80% (12)

Explanation

Correlation policies allow you to correlate security events based on various criteria, including time of day, user, source/destination IP address, and more. When the specified criteria are met, the correlation policy can trigger a response action, such as sending an email notification.

Topics

#Cisco FMC#Correlation Policy#Security Monitoring#Alerting

Community Discussion

No community discussion yet for this question.

Full 300-710 Practice