How can a network engineer export all flow logs and security actions to a security information and event management (SIEM) system?

Question

Options

• AEnable syslog on the Instant-On Network (ION) device.
• BUse a zone-based firewall to export directly through application program interface (API) to the
• CEnable Simple Network Management Protocol (SNMP) on the Instant-On Network (ION) device.
• DUse the centralized flow data-export tool built into the controller.

• A
  89% (34)
• B
  3% (1)
• C
  3% (1)
• D
  5% (2)

Explanation

Syslog is the industry-standard protocol for transmitting log data - including flow logs and security events - from network devices to external systems like SIEMs, making option A the correct method for this integration. Option B is incorrect because a zone-based firewall is a traffic control mechanism, not a log export tool; direct API integration to a SIEM is also not how ION devices are architected for log delivery. Option C is wrong because SNMP is a monitoring/management protocol used for polling device metrics and sending traps, not for streaming detailed flow logs and security action records to a SIEM. Option D is a plausible-sounding distractor, but there is no generic "centralized flow data-export tool" built into the controller for SIEM export - syslog on the device itself is the correct pathway.

Memory tip: Think "Syslog ships Security data to SIEMs" - all three share the "S" and belong together. SNMP monitors, syslog reports.

No community discussion yet for this question.