An engineer is configuring cloud logging on Cisco ASA and needs events to compress. Which component must be configured to accomplish this goal?

Question

Options

• ACisco analytics
• BCDO event viewer
• CSWC service
• DSDC VM

• A
  15% (4)
• B
  4% (1)
• C
  7% (2)
• D
  74% (20)

Explanation

SDC VM (Secure Device Connector) is correct because it is the on-premises virtual machine that acts as a proxy between local Cisco devices (like the ASA) and Cisco's cloud services. The SDC is specifically responsible for compressing and encrypting event data before transmitting it to the cloud - without a configured SDC VM, cloud logging with compression cannot function.

Why the distractors are wrong:

• A. Cisco Analytics - a broad analytics platform/service, not a component involved in event compression for ASA cloud logging.
• B. CDO Event Viewer - a cloud-side UI feature within Cisco Defense Orchestrator used to view events after they arrive; it plays no role in compressing them.
• C. SWC (Stealthwatch Cloud) service - a network traffic analysis service focused on threat detection, not on compressing ASA log events for cloud delivery.

Memory tip: Think of SDC as a "Shipping and Delivery Compactor" - it sits on your premises, squishes (compresses) the data into a smaller package, and ships it securely to the cloud. If you need compression, you need the local SDC VM configured first.

No community discussion yet for this question.