What is the advantage of having Cisco Firepower devices send events to Cisco Threat Response via the security services exchange portal directly as opposed to using syslog?
A.
Firepower devices do not need to be connected to the Internet.
B.
An on-premises proxy server does not need to set up and maintained.
C.
All types of Firepower devices are supported.
D.
Supports all devices that are running supported versions of Firepower
Nope.
The correct answer is B -> for sure !
See the following link to feel confident :)
https://www.cisco.com/c/en/us/td/docs/security/firepower/integrations/CTR/Firepower_and_Cisco_Threat_Response_Integration_Guide/about_integrating_firepower_and_cisco_threat_response.html
I have been confused all this time because your link was a list page.
For the opening sentence of the following link, B is correct. I finally understood.
https://www.cisco.com/c/en/us/td/docs/security/secure-firewall/integrations/xdr/secure-firewall-threat-defense-and-xdr-integration-guide/send_events_to_the_cloud_using_syslog.html#:~:text=configure%20your%20devices%20to%20send%20syslog%20messages%20to%20this%20proxy
The correct answer is D.
Thisintegration sendssupported eventsfrom Firepower devicesto CiscoSecureX threat response for analysis
alongside data from your other products and other sources
upvoted 3 times
...
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Crazy_Creator
Highly Voted 2 months, 4 weeks agotinyJoe
4 days, 13 hours agoSarbi
Most Recent 3 months, 1 week ago