The role with the
highest privilege in the system and is designed for users who need complete
control over system configurations, indexes, and data.
Admin
Designed for
advanced users who need more capabilities than regular users but do not require
full administrative access.
Power
Allows for both
administrative work and data management.
Select Match
The default role
for most end users and provides access to basic search and reporting
functionalities.
User
Which three common
mandatory configuration fields apply to all Cisco security products when using
the Application Setup page within the Cisco Security Cloud app? (Choose three.)
- Host
- Index
- Input
Name
- Interval
- Logging level
- Name
What is the benefit of
using Cisco Security Cloud app dashboards?
- Dashboards can help the administrators
monitor its performance and cloud connections.
- Dashboards can help the administrators monitor
resource performance, health, errors, product activities, and data
integrity.
- Dashboards can help the SOC teams monitor
unauthorized administrative access.
- Dashboards can help the SOC teams monitor
users’ internal and external activities.
To install the Cisco Security Cloud app from a file, which of the
following is a valid source location from which to get the file?
- from Cisco Download Center
- from Splunk Add-ons documentation page
- from Splunk Download Center
- from Splunkbase documentation page
Which of the following
apps can be used to integrate different Cisco Security Solutions?
- Cisco Cloud Security app
- Cisco Security Cloud app
- Cisco Splunk app
- Cisco Splunk Security apps
Which of the following
is a Cisco Security Cloud app dashboard?
- Cisco AppDynamics
- App Insights
- Cisco Security Cloud App
- Resource Utilization
Which of the following
is an indicator for scaling Splunk?
- CPU and Memory Utilization: Consistently
high CPU (above 50 percent) and memory usage (above 50 percent) during
peak times.
- CPU and Memory Utilization: Consistently
high CPU (above 55 percent) and memory usage (above 85 percent) during
peak times.
- CPU and Memory Utilization: Consistently
high CPU (above 65 percent) and memory usage (above 60 percent) during
peak times.
- CPU and Memory Utilization: Consistently high CPU
(above 75 percent) and memory usage (above 80 percent) during peak times.
When configuring the
Cisco Secure Firewall eStreamer integration using the Cisco Security Cloud app,
what is required with a corresponding password?
- Cisco Secure Firewall Management Center eStreamer
certificate
- Cisco Secure Firewall Management Center
self-signed certificate for accessing the Cisco Secure Firewall Management
Center GUI
- Cisco Secure Firewall Management Center
eStreamer API Client ID
- Cisco Secure Firewall Management Center
eStreamer username
What is shown at the
bottom of the Cisco Security Cloud App > Secure Firewall Dashboard page?
- Event Details table
- Connection Events table
- Intrusion Events widgets
- Timeline charts
Which UDP port number
is used by Syslog by default?
- 514
- 22
- 443
- 8080
Which three types of
data can be streamed using eStreamer in Cisco Secure Firewall Management
Center? (Choose three.)
- discovery events
- correlation
and allow list events
- intrusion events, malware events, file events,
connection events
- CPU and
Memory, high availability, Platform Logs firewall configuration settings
- VPN session logs
In Splunk, what
information can be viewed on the Data Integrity dashboard for the Cisco
Security Cloud Application?
- Analysis reports of historical malware.
- Detailed logs of user activity.
- Metrics of system performance.
- Status of events for each integrated solution.
Over which method and
TCP port do eStreamer server and client communicate?
- HTTPS Secure TLS channel over TCP port 8302
- HTTPS Secure TLS channel over TCP port 443
- HTTP over TCP port 80
- Syslog over UDP port 514
- Syslog over TCP port 514
Which dashboard of
Cisco Security Cloud Application in Splunk provides performance information
such as CPU utilization, memory utilization, and input connection health
monitoring?
- Data Integrity
- Diagnostics
- Resource Utilization
- Secure Firewall Dashboard
Which of the following
dashboards provides a unified view of the Cisco Security Cloud performance,
error handling, and health monitoring?
- Data Integrity Dashboard
- Health Monitoring Dashboard
- Resource Utilization Dashboard
- XDR Dashboard
Which two of the
following options are valid authentication methods for integrating Cisco XDR
with Splunk Enterprise by using the Cisco Security Cloud app? (Choose two.)
- Client ID
- Direct Database Connection
- Message Broker
- OAuth
- SOAP APIs
Which of the following
tiles can be found within the Cisco XDR dashboard on the Cisco Security Cloud
app?
- Mean
Time To Engage, Mean Time To Resolution
- XDR Cases
- Unresolved Incidents
- TTP Time Line Charts
Which of the following
methods helps verify that the integration between Cisco XDR and Cisco Security
Cloud App is successful?
- Checking the app status on the Cisco
Security Cloud app.
- Checking the Splunk Health Connection
tool.
- Using the command line for validation.
- Using the dedicated validation dashboard on the
Cisco XDR app.
Which of the following
options can generate user-specific credentials to access APIs programmatically?
- API client credentials
- OAuth
code client credentials
- Username client credentials
- Token client
credentials
Which of the following
configuration fields is optional when configuring the Cisco XDR on the Cisco
Security Cloud app?
- Authentication Method
- Region
- Promote XDR Incidents to Enterprise Security
Notables
- Import Time Range
Which of the following
authentication methods is used when integrating Cisco XDR with Splunk Cloud?
- client certificate authentication
- OAuth authentication
- passwordless authentication
- token-based authentication
Which dashboard helps
an administrator ensure compliance with security policies such as MFA and
locked-out users?
- Cisco Multicloud Defense dashboard on
Cisco Security Cloud app.
- Duo Dashboard on Cisco Security Cloud app.
- Secure Malware Analytics dashboard on
Cisco Security Cloud app.
- Secure Network Analytics dashboard on
Cisco Security Cloud app.
How would you
integrate the Cisco Secure Network Analytics with the Cisco Security Cloud app?
- Create a Cisco Security Cloud app user
with the needed permissions, and configure the Cisco Secure Network
Analytics in the Cisco Security Cloud app.
- Create a Cisco Secure Network Analytics SMC user
with the needed permissions, determine the Cisco Secure Network Analytics
Domain ID, and configure the Cisco Secure Network Analytics in the Cisco
Security Cloud app.
- Create the Cisco Secure Network Analytics
Certificate and HTTPS connection settings and configure the Cisco Secure
Network Analytics in the Cisco Security Cloud app.
- Use the Cisco Secure Network Analytics API
Key and configure Cisco Secure Network Analytics in the Cisco Security
Cloud app.
What format does
Multicloud Defense use when sending Security Events and Traffic Log information
to Splunk?
- structured data logs
- semi-structured JSON data logs
- syslogs
- unstructured data logs
Which four attributes
are mandatory, when configuring the Cisco Secure Email Threat Defense
Connection configuration settings? (Choose four.)
- API
Key
- Client ID
- Email Threat Defense client certificate
- Email Threat
Defense IP address or hostname
- Region name
- Security Key
Which two of the
following attributes are mandatory, when configuring the SNA Connection
configuration settings? (Choose two.)
- API Key
- API Secret
- Cisco Security Cloud app IP Address
- Domain ID
- SMC username
Which method is valid
for verifying Cisco Duo's integration with Cisco Security Cloud app?
- Checking
the Duo Dashboard on the Cisco Security Cloud app.
- Generating integration validation report
from the Cisco Security Cloud app.
- Using the
Cisco Duo integration validation tool.
- Using the Cisco Security Cloud app
integration validation tool.
Which method does the
Multicloud Defense use to communicate with Splunk?
- APIs
- DB connect
- Universal forwarder
- HEC
Which of the following
is a Cisco Security Cloud app dashboard?
- Cisco AppDynamics
- App Insights
- Cisco
Security Cloud App
- Resource Utilization
