SNCF — Securing Networks with Firepower — Question 109

An administrator is adding a new URL-based category feed to the Cisco FMC for use within the policies. The intelligence source does not use STIX, but instead uses a .txt file format. Which action ensures that regular updates are provided?

Answer options

• A. Add a URL source and select the flat file type within Cisco FMC.
• B. Add a TAXII feed source and input the URL for the feed.
• C. Upload the .txt file and configure automatic updates using the embedded URL.
• D. Convert the .txt file to STIX and upload it to the Cisco FMC.

Correct answer: A

Explanation

The correct answer is A because adding a URL source and selecting the flat file type allows the Cisco FMC to regularly check for updates from the specified .txt file. Options B and D are incorrect as they involve using a TAXII feed and converting to STIX, both of which do not apply to a non-STIX .txt file. Option C is also incorrect because simply uploading the .txt file without configuring the URL for updates would not ensure regular updates.