350-701 Question #749: Real Exam Question with Answer & Explanation

The correct answer is D. SDC VM. SDC VM (Secure Device Connector) is correct because it is the on-premises virtual machine that acts as a proxy between local Cisco devices (like the ASA) and Cisco's cloud services. The SDC is specifically responsible for compressing and encrypting event data before transmitting

Submitted by kev92· Mar 30, 2026Securing the Cloud

Question

An engineer is configuring cloud logging on Cisco ASA and needs events to compress. Which component must be configured to accomplish this goal?

Options

ACisco analytics
BCDO event viewer
CSWC service
DSDC VM

Explanation

SDC VM (Secure Device Connector) is correct because it is the on-premises virtual machine that acts as a proxy between local Cisco devices (like the ASA) and Cisco's cloud services. The SDC is specifically responsible for compressing and encrypting event data before transmitting it to the cloud - without a configured SDC VM, cloud logging with compression cannot function.

Why the distractors are wrong:

A. Cisco Analytics - a broad analytics platform/service, not a component involved in event compression for ASA cloud logging.
B. CDO Event Viewer - a cloud-side UI feature within Cisco Defense Orchestrator used to view events after they arrive; it plays no role in compressing them.
C. SWC (Stealthwatch Cloud) service - a network traffic analysis service focused on threat detection, not on compressing ASA log events for cloud delivery.

Memory tip: Think of SDC as a "Shipping and Delivery Compactor" - it sits on your premises, squishes (compresses) the data into a smaller package, and ships it securely to the cloud. If you need compression, you need the local SDC VM configured first.

Topics

#Cisco ASA#Cloud Logging#Secure Device Connector#Log Compression

Community Discussion

No community discussion yet for this question.

Full 350-701 Practice