350-701 · Question #723
An engineer must use Cisco Secure Firewall Management Center to send Cisco Secure Firewall Threat Defense events to the cloud. The engineer performed these actions already: - FTD devices were added…
The correct answer is B. Enable cloud event connector. To complete the configuration for sending Cisco Secure Firewall Threat Defense events to the cloud from FMC, the cloud event connector must be explicitly enabled.
Question
An engineer must use Cisco Secure Firewall Management Center to send Cisco Secure Firewall Threat Defense events to the cloud. The engineer performed these actions already:
- FTD devices were added to FMC
- FTD devices were assigned licenses
Which action must be taken to complete Cisco Cloud Event Configuration?
Options
- ARegister with Cisco Smart Licensing.
- BEnable cloud event connector.
- CCreate a Cisco Cloud Region.
- DAssign a Cloud Event License.
How the community answered
(48 responses)- A4% (2)
- B92% (44)
- C2% (1)
- D2% (1)
Why each option
To complete the configuration for sending Cisco Secure Firewall Threat Defense events to the cloud from FMC, the cloud event connector must be explicitly enabled.
Registering with Cisco Smart Licensing is typically a prerequisite for assigning licenses, which has already been performed as per the problem description.
After FTD devices are added to FMC and their necessary licenses are assigned, the crucial next step to send events to the cloud is to enable the cloud event connector within the Cisco Secure Firewall Management Center. This connector is responsible for gathering event data from the FTD devices and securely transmitting it to Cisco's cloud services, such as SecureX or Security Analytics and Logging.
Creating a Cisco Cloud Region is not a standard configuration step for simply sending FTD events to the cloud; cloud regions are more relevant to deploying cloud infrastructure.
Assigning a Cloud Event License would typically fall under the broader 'assigned licenses' step already mentioned, implying that the necessary licensing is in place for the functionality, but the feature still needs to be enabled.
Concept tested: Cisco Secure Firewall Cloud Event Configuration
Source: https://www.cisco.com/c/en/us/td/docs/security/firepower/72/configuration/guide/fpmc-config-guide-72/ftd-events-and-event-logging.html
Topics
Community Discussion
No community discussion yet for this question.