3.6 Monitoring Protocols CCIE-SECURITY Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   What is the primary purpose of Cisco eStreamer?

   • ATo provide a backup mechanism for Firepower configurations
   • BTo replace SNMP for device monitoring
   • CTo stream real-time security events from Firepower appliances to external collectors
   • DTo encrypt all traffic between Firepower appliances
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   Which of the following best describes a NetFlow flow record?

   • AA configuration file that defines export destinations
   • BA log entry for each individual packet
   • CA summary of all traffic on an interface over a fixed time period
   • DA set of fields identifying a unidirectional sequence of packets sharing common properties
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   Which of the following is a typical use case for eStreamer?

   • ASending firewall logs to a central syslog server
   • BMonitoring CPU and memory usage of Firepower appliances
   • CIntegrating Firepower events with a SIEM platform
   • DBacking up Firepower configuration files
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   What is required to configure eStreamer on a Firepower appliance?

   • AAn SNMP community string
   • BAn eStreamer client certificate and a configured collector
   • CA valid syslog server address
   • DA NetFlow collector IP address
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   When integrating eStreamer with a SIEM, what is the typical method to receive the data?

   • AThe Firepower appliance exports NetFlow to the SIEM
   • BThe Firepower appliance sends syslog to the SIEM
   • CThe SIEM polls the Firepower appliance via SNMP
   • DThe SIEM acts as an eStreamer client that connects to the Firepower appliance
   Reveal Solution Discussion Select an answer first