SNCF — Securing Networks with Firepower — Question 40

The event dashboard within the Cisco FMC has been inundated with low priority intrusion drop events, which are overshadowing high priority events. An engineer has been tasked with reviewing the policies and reducing the low priority events. Which action should be configured to accomplish this task?

Answer options

• A. drop packet
• B. generate events
• C. drop connection
• D. drop and generate

Correct answer: A

Explanation

Configuring 'drop packet' will effectively filter out low-priority intrusion drop events, allowing the engineer to focus on more critical alerts. The option 'generate events' would still create notifications for low-priority issues, while 'drop connection' and 'drop and generate' would not specifically target the reduction of low-priority events as required.