Exam 300-710 topic 1 question 236 discussion

Actual exam question from Cisco's 300-710

Question #: 236
Topic #: 1

An administrator needs to configure Cisco FMC to send a notification email when a data transfer larger than 10 MB is initiated from an internal host outside of standard business hours. Which Cisco FMC feature must be configured to accomplish this task?

A. file and malware policy
B. application detector
C. correlation policy
D. intrusion policy

Show Suggested Answer

Suggested Answer: C 🗳️

by Joe_Blue at March 11, 2023, 12:05 p.m.

Comments

Submit Cancel

Joe_Blue

Highly Voted 4 months, 1 week ago

Selected Answer: C

The correct answer is C. To accomplish this task, the administrator must configure a correlation policy in Cisco FMC. Correlation policies allow you to correlate security events based on various criteria, including time of day, user, source/destination IP address, and more. When the specified criteria are met, the correlation policy can trigger a response action, such as sending an email notification.

upvoted 6 times

...

tinyJoe

Most Recent 2 weeks, 3 days ago

Selected Answer: C

https://www.cisco.com/c/en/us/td/docs/security/secure-firewall/management-center/admin/760/management-center-admin-76/correlation-policies.html?bookSearch=true#:~:text=The%20rule%20triggers%20when%20network%20traffic%20deviates%20from%20the%20pattern%20characterized%20by%20the%20profile%20you%20choose.

upvoted 2 times

...

Exam 300-710 All Questions

View all questions & answers for the 300-710 exam

Exam 300-710 topic 1 question 236 discussion

Comments

Joe_Blue

tinyJoe

SY0-701