Which application is required to support adding user information from Microsoft Active Directory to FirePOWER events?

Question

Options

• ACisco ASA Identity Firewall
• BMicrosoft Active Directory Agent
• CCisco Directory Agent
• DSourcefire User Agent

• A
  2% (1)
• B
  5% (3)
• C
  3% (2)
• D
  90% (57)

Explanation

Sourcefire User Agent is correct because it is the dedicated Windows-based application installed to monitor Microsoft Active Directory login and logoff events, then forward user-to-IP address mappings to the FirePOWER Management Center (FMC) - enabling user identity context within FirePOWER security events.

Why the distractors are wrong:

• A (Cisco ASA Identity Firewall) is a feature built into the ASA firewall platform for its own policy enforcement, not an agent that feeds user data into FirePOWER.
• B (Microsoft Active Directory Agent) is a fabricated product name - Microsoft does not produce an agent specifically for FirePOWER integration.
• C (Cisco Directory Agent) does not exist as a real Cisco product; it's a plausible-sounding distractor designed to confuse with the correct answer.

Memory tip: Remember that FirePOWER was originally a Sourcefire product before Cisco's acquisition - so the agent that integrates with it carries the same legacy brand name. Think: "Sourcefire built FirePOWER, so the Sourcefire User Agent feeds it user data."

No community discussion yet for this question.