350-701 · Question #661
An engineer is configuring a Cisco Secure Email Cloud Gateway instance to send logs to an external server for auditing. For security purposes, a username and SSH key with the fingerprint…
The correct answer is C. SCP push. Given the requirement for SSH key authentication and SSHv2 protocol for log transfer, SCP (Secure Copy Protocol) push is the appropriate log retrieval method for Cisco Secure Email Cloud Gateway.
Question
An engineer is configuring a Cisco Secure Email Cloud Gateway instance to send logs to an external server for auditing. For security purposes, a username and SSH key with the fingerprint d0:46:03:8e:d7:f1:bb:9b:33:13:94:60:49:da:9b:e3 has been generated on the remote log server that accepts only the SSHv2 protocol. Which log retrieval method must be configured in the log subscription?
Options
- Asyslog push
- Bmanually download
- CSCP push
- DFTP push
How the community answered
(45 responses)- A7% (3)
- B2% (1)
- C89% (40)
- D2% (1)
Why each option
Given the requirement for SSH key authentication and SSHv2 protocol for log transfer, SCP (Secure Copy Protocol) push is the appropriate log retrieval method for Cisco Secure Email Cloud Gateway.
Syslog push is typically used for real-time event logging but doesn't inherently support SSH key-based authentication for file transfer or guarantee SSHv2 as the transport for pushing files.
Manually downloading logs does not meet the requirement of sending logs to an external server for auditing through an automated push mechanism.
The problem states that a username and SSH key are used for authentication and that the remote log server accepts only the SSHv2 protocol. SCP (Secure Copy Protocol) is a network protocol that supports file transfers between hosts on a network, using SSH (Secure Shell) as its underlying protocol for data transfer and authentication, including support for SSH keys and SSHv2. Therefore, SCP push is the only option that aligns with the specified security requirements.
FTP (File Transfer Protocol) push does not use SSH for encryption or authentication and is inherently insecure for sensitive data transfer unless secured by other means (like FTPS), which is not indicated here, nor does it support SSH key authentication directly.
Concept tested: Cisco Secure Email Gateway log transfer methods
Source: https://www.cisco.com/c/en/us/td/docs/security/ces/cloud_email_security_admin_guide/CES_AG_9_7/CES_AG_9_7_chapter_0110.html
Topics
Community Discussion
No community discussion yet for this question.