5.9 Cisco SMA for Centralized Content Security Management CCIE-SECURITY Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   How does SMA present aggregated reporting data from multiple appliances?

   • AThrough individual appliance web interfaces only
   • BBy exporting data to a third-party SIEM only
   • CIn a unified dashboard with customizable reports
   • DBy sending raw logs to a syslog server
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A global enterprise with regional security teams in the Americas, EMEA, and APAC is deploying Cisco SMA to centralize email and web security management. Each region has its own ESA and WSA clusters and must maintain local control over quarantine release and policy exceptions. However, the global CISO requires a single pane of glass for reporting and a unified policy baseline. Which SMA deployment mode best meets these requirements?

   • ACentralized deployment with a single SMA managing all appliances
   • BDistributed deployment with each SMA managing only its local appliances and no central reporting
   • CCentralized deployment with SMA in the DMZ and appliances in each region
   • DDistributed deployment with one SMA per region, all reporting to a central management console
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A company has multiple ESAs in different data centers and wants to use SMA to centralize email security management. The security team needs to view aggregated email traffic reports and also delegate daily quarantine administration to a junior analyst without giving them full SMA admin rights. What should the administrator configure on SMA?

   • AEnable SMA's 'Centralized Reporting' feature and give the analyst the 'Read-Only' role
   • BAdd all ESAs to SMA and create a custom role with quarantine-only permissions
   • CConfigure each ESA to send reports directly to the analyst's email
   • DUse SMA's built-in 'Administrator' role for the analyst and add ESAs to SMA
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   An organization uses multiple WSAs for web filtering and wants to use SMA to centralize web security policy management. The policy must be consistent across all WSAs, but the network team needs to see which users are hitting blocked categories. What is the most efficient way to achieve this with SMA?

   • AUse SMA to monitor WSA traffic but keep policies local to each WSA
   • BConfigure SMA to push a single web policy to all WSAs and use SMA's reporting to view blocked categories
   • CSet up SMA to receive syslog from WSAs and use a third-party tool for policy management
   • DManually configure the same policy on each WSA and use WSA's individual reports
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A security administrator is tasked with ensuring that all email and web security policies are consistent across the enterprise. The company has both ESAs and WSAs. The administrator wants to manage policies from a single interface. What should the administrator use?

   • ACisco Firepower Management Center (FMC) for policy management
   • BCisco SMA with centralized policy management for both ESA and WSA
   • CCisco ESA's built-in policy management and WSA's separate interface
   • DCisco Identity Services Engine (ISE) for policy management
   Reveal Solution Discussion Select an answer first