A network administrator is reviewing a weekly scheduled attacks risk report and notices a host that is flagged for an Impact 2 attack. Where should the administrator look within Cisco FMC to find…

The correct answer is B. Analysis > Correlation > Correlation Events. When a host is flagged for an Impact 2 attack in Cisco FMC (Firepower Management Center), this indicates a moderate threat, meaning the attack was likely successful or could affect a vulnerable host. To investigate what happened, including details about the attack…

Management and Troubleshooting

Question

A network administrator is reviewing a weekly scheduled attacks risk report and notices a host that is flagged for an Impact 2 attack. Where should the administrator look within Cisco FMC to find out more relevant information about this host and attack?

Options

AAnalysis > Lookup > Whois
BAnalysis > Correlation > Correlation Events
CAnalysis > Hosts > Vulnerabilities
DAnalysis > Hosts > Host Attributes

How the community answered

(58 responses)

A
2% (1)
B
91% (53)
C
3% (2)
D
3% (2)

Explanation

When a host is flagged for an Impact 2 attack in Cisco FMC (Firepower Management Center), this indicates a moderate threat, meaning the attack was likely successful or could affect a vulnerable host. To investigate what happened, including details about the attack, source/destination, application, and relevant detection rules, the administrator should review correlation events, which tie together intrusion events, host profiles, and vulnerabilities. guide-v70/correlation_and_compliance_events.html

Topics

#Cisco FMC#Security Monitoring#Threat Analysis#Correlation Events

Community Discussion

No community discussion yet for this question.

Full 300-710 Practice