The role with the
highest privilege in the system and is designed for users who need complete
control over system configurations, indexes, and data.
Admin
Designed for
advanced users who need more capabilities than regular users but do not require
full administrative access.
Power
Allows for both
administrative work and data management.
Select Match
The default role
for most end users and provides access to basic search and reporting
functionalities.
User
Which three common
mandatory configuration fields apply to all Cisco security products when using
the Application Setup page within the Cisco Security Cloud app? (Choose three.)
Top of Form
- Host
- Index
- Input
Name
- Interval
- Logging level
- Name
Bottom of Form
What is the benefit of
using Cisco Security Cloud app dashboards?
Top of Form
- Dashboards can help the administrators
monitor its performance and cloud connections.
- Dashboards can help the administrators monitor
resource performance, health, errors, product activities, and data
integrity.
- Dashboards can help the SOC teams monitor
unauthorized administrative access.
- Dashboards can help the SOC teams monitor
users’ internal and external activities.
To install the Cisco Security Cloud app from a file, which of the
following is a valid source location from which to get the file?
- Top of Form
- from Cisco Download Center
- from Splunk Add-ons documentation page
- from Splunk Download Center
- from Splunkbase documentation page
- Bottom of Form
Bottom of Form
Which of the following
apps can be used to integrate different Cisco Security Solutions?
Top of Form
- Cisco Cloud Security app
- Cisco Security Cloud app
- Cisco Splunk app
- Cisco Splunk Security apps
Bottom of Form
Which of the following
is a Cisco Security Cloud app dashboard?
Top of Form
- Cisco AppDynamics
- App Insights
- Cisco Security Cloud App
- Resource Utilization
Bottom of Form
Which of the following
is an indicator for scaling Splunk?
Top of Form
- CPU and Memory Utilization: Consistently
high CPU (above 50 percent) and memory usage (above 50 percent) during
peak times.
- CPU and Memory Utilization: Consistently
high CPU (above 55 percent) and memory usage (above 85 percent) during
peak times.
- CPU and Memory Utilization: Consistently
high CPU (above 65 percent) and memory usage (above 60 percent) during
peak times.
- CPU and Memory Utilization: Consistently high CPU
(above 75 percent) and memory usage (above 80 percent) during peak times.
When configuring the
Cisco Secure Firewall eStreamer integration using the Cisco Security Cloud app,
what is required with a corresponding password?
- Top of Form
- Cisco Secure Firewall Management Center eStreamer
certificate
- Cisco Secure Firewall Management Center
self-signed certificate for accessing the Cisco Secure Firewall Management
Center GUI
- Cisco Secure Firewall Management Center
eStreamer API Client ID
- Cisco Secure Firewall Management Center
eStreamer username
What is shown at the
bottom of the Cisco Security Cloud App > Secure Firewall Dashboard page?
Top of Form
- Event Details table
- Connection Events table
- Intrusion Events widgets
- Timeline charts
Bottom of Form
Which UDP port number
is used by Syslog by default?
Top of Form
Bottom of Form
Which three types of
data can be streamed using eStreamer in Cisco Secure Firewall Management
Center? (Choose three.)
Top of Form
- discovery events
- correlation
and allow list events
- intrusion events, malware events, file events,
connection events
- CPU and
Memory, high availability, Platform Logs firewall configuration settings
- VPN session logs
In Splunk, what
information can be viewed on the Data Integrity dashboard for the Cisco
Security Cloud Application?
Top of Form
- Analysis reports of historical malware.
- Detailed logs of user activity.
- Metrics of system performance.
- Status of events for each integrated solution.
Bottom of Form
Over which method and
TCP port do eStreamer server and client communicate?
Top of Form
- HTTPS Secure TLS channel over TCP port 8302
- HTTPS Secure TLS channel over TCP port 443
- HTTP over TCP port 80
- Syslog over UDP port 514
- Syslog over TCP port 514
Bottom of Form
Which dashboard of
Cisco Security Cloud Application in Splunk provides performance information
such as CPU utilization, memory utilization, and input connection health
monitoring?
Top of Form
- Data Integrity
- Diagnostics
- Resource Utilization
- Secure Firewall Dashboard
Bottom of Form
Which of the following
dashboards provides a unified view of the Cisco Security Cloud performance,
error handling, and health monitoring?
Top of Form
- Data Integrity Dashboard
- Health Monitoring Dashboard
- Resource Utilization Dashboard
- XDR Dashboard
Bottom of Form
Which two of the
following options are valid authentication methods for integrating Cisco XDR
with Splunk Enterprise by using the Cisco Security Cloud app? (Choose two.)
Top of Form
- Client ID
- Direct Database Connection
- Message Broker
- OAuth
- SOAP APIs
Which of the following
tiles can be found within the Cisco XDR dashboard on the Cisco Security Cloud
app?
Top of Form
- Mean
Time To Engage, Mean Time To Resolution
- XDR Cases
- Unresolved Incidents
- TTP Time Line Charts
Bottom of Form
Which of the following
methods helps verify that the integration between Cisco XDR and Cisco Security
Cloud App is successful?
Top of Form
- Checking the app status on the Cisco
Security Cloud app.
- Checking the Splunk Health Connection
tool.
- Using the command line for validation.
- Using the dedicated validation dashboard on the
Cisco XDR app.
Bottom of Form
Which of the following
options can generate user-specific credentials to access APIs programmatically?
Top of Form
- API client credentials
- OAuth
code client credentials
- Username client credentials
- Token client
credentials
Bottom of Form
Which of the following
configuration fields is optional when configuring the Cisco XDR on the Cisco
Security Cloud app?
Top of Form
- Authentication Method
- Region
- Promote XDR Incidents to Enterprise Security
Notables
- Import Time Range
Bottom of Form
Which of the following
authentication methods is used when integrating Cisco XDR with Splunk Cloud?
Top of Form
- client certificate authentication
- OAuth authentication
- passwordless authentication
- token-based authentication
Bottom of Form
Which dashboard helps
an administrator ensure compliance with security policies such as MFA and
locked-out users?
Top of Form
- Cisco Multicloud Defense dashboard on
Cisco Security Cloud app.
- Duo Dashboard on Cisco Security Cloud app.
- Secure Malware Analytics dashboard on
Cisco Security Cloud app.
- Secure Network Analytics dashboard on
Cisco Security Cloud app.
Bottom of Form
How would you
integrate the Cisco Secure Network Analytics with the Cisco Security Cloud app?
Top of Form
- Create a Cisco Security Cloud app user
with the needed permissions, and configure the Cisco Secure Network
Analytics in the Cisco Security Cloud app.
- Create a Cisco Secure Network Analytics SMC user
with the needed permissions, determine the Cisco Secure Network Analytics
Domain ID, and configure the Cisco Secure Network Analytics in the Cisco
Security Cloud app.
- Create the Cisco Secure Network Analytics
Certificate and HTTPS connection settings and configure the Cisco Secure
Network Analytics in the Cisco Security Cloud app.
- Use the Cisco Secure Network Analytics API
Key and configure Cisco Secure Network Analytics in the Cisco Security
Cloud app.
Bottom of Form
What format does
Multicloud Defense use when sending Security Events and Traffic Log information
to Splunk?
Top of Form
- structured data logs
- semi-structured JSON data logs
- syslogs
- unstructured data logs
Bottom of Form
Which four attributes
are mandatory, when configuring the Cisco Secure Email Threat Defense
Connection configuration settings? (Choose four.)
Top of Form
- API
Key
- Client ID
- Email Threat Defense client certificate
- Email Threat
Defense IP address or hostname
- Region name
- Security Key
Which two of the
following attributes are mandatory, when configuring the SNA Connection
configuration settings? (Choose two.)
Top of Form
- API Key
- API Secret
- Cisco Security Cloud app IP Address
- Domain ID
- SMC username
Which method is valid
for verifying Cisco Duo's integration with Cisco Security Cloud app?
Top of Form
- Checking
the Duo Dashboard on the Cisco Security Cloud app.
- Generating integration validation report
from the Cisco Security Cloud app.
- Using the
Cisco Duo integration validation tool.
- Using the Cisco Security Cloud app
integration validation tool.
Bottom of Form
Which method does the
Multicloud Defense use to communicate with Splunk?
Top of Form
- APIs
- DB connect
- Universal forwarder
- HEC
Bottom of Form
Bottom of Form
Which of the following
is a Cisco Security Cloud app dashboard?
Top of Form
- Cisco AppDynamics
- App Insights
- Cisco
Security Cloud App
- Resource Utilization
Bottom of Form
Bottom of Form
