nerdexam
Cisco

350-701 · Question #661

An engineer is configuring a Cisco Secure Email Cloud Gateway instance to send logs to an external server for auditing. For security purposes, a username and SSH key with the fingerprint…

The correct answer is C. SCP push. Given the requirement for SSH key authentication and SSHv2 protocol for log transfer, SCP (Secure Copy Protocol) push is the appropriate log retrieval method for Cisco Secure Email Cloud Gateway.

Submitted by akirajp· Mar 30, 2026Content Security

Question

An engineer is configuring a Cisco Secure Email Cloud Gateway instance to send logs to an external server for auditing. For security purposes, a username and SSH key with the fingerprint d0:46:03:8e:d7:f1:bb:9b:33:13:94:60:49:da:9b:e3 has been generated on the remote log server that accepts only the SSHv2 protocol. Which log retrieval method must be configured in the log subscription?

Options

  • Asyslog push
  • Bmanually download
  • CSCP push
  • DFTP push

How the community answered

(45 responses)
  • A
    7% (3)
  • B
    2% (1)
  • C
    89% (40)
  • D
    2% (1)

Why each option

Given the requirement for SSH key authentication and SSHv2 protocol for log transfer, SCP (Secure Copy Protocol) push is the appropriate log retrieval method for Cisco Secure Email Cloud Gateway.

Asyslog push

Syslog push is typically used for real-time event logging but doesn't inherently support SSH key-based authentication for file transfer or guarantee SSHv2 as the transport for pushing files.

Bmanually download

Manually downloading logs does not meet the requirement of sending logs to an external server for auditing through an automated push mechanism.

CSCP pushCorrect

The problem states that a username and SSH key are used for authentication and that the remote log server accepts only the SSHv2 protocol. SCP (Secure Copy Protocol) is a network protocol that supports file transfers between hosts on a network, using SSH (Secure Shell) as its underlying protocol for data transfer and authentication, including support for SSH keys and SSHv2. Therefore, SCP push is the only option that aligns with the specified security requirements.

DFTP push

FTP (File Transfer Protocol) push does not use SSH for encryption or authentication and is inherently insecure for sensitive data transfer unless secured by other means (like FTPS), which is not indicated here, nor does it support SSH key authentication directly.

Concept tested: Cisco Secure Email Gateway log transfer methods

Source: https://www.cisco.com/c/en/us/td/docs/security/ces/cloud_email_security_admin_guide/CES_AG_9_7/CES_AG_9_7_chapter_0110.html

Topics

#Cisco Secure Email#SCP push#log subscription#SSHv2

Community Discussion

No community discussion yet for this question.

Full 350-701 Practice