300-710 · Question #68
Which Cisco Firepower feature is used to reduce the number of events received in a period of time?
The correct answer is D. thresholding. Thresholding in Cisco Firepower allows administrators to limit the number of intrusion events logged or alerted on for a given rule during a specified time interval. It can be configured to fire only once per interval, once per source/destination IP, or after a certain number…
Question
Which Cisco Firepower feature is used to reduce the number of events received in a period of time?
Options
- Arate-limiting
- Bsuspending
- Ccorrelation
- Dthresholding
How the community answered
(19 responses)- A5% (1)
- B5% (1)
- D89% (17)
Explanation
Thresholding in Cisco Firepower allows administrators to limit the number of intrusion events logged or alerted on for a given rule during a specified time interval. It can be configured to fire only once per interval, once per source/destination IP, or after a certain number of occurrences-effectively reducing event noise. Rate-limiting controls traffic volume, correlation creates compound event rules, and suspending is not a standard Firepower event-management feature.
Topics
Community Discussion
No community discussion yet for this question.