SNCF — Securing Networks with Firepower — Question 48

After using Firepower for some time and learning about how it interacts with the network, an administrator is trying to correlate malicious activity with a user. Which widget should be configured to provide this visibility on the Cisco Firepower dashboards?

Answer options

• A. Current Sessions
• B. Correlation Events
• C. Current Status
• D. Custom Analysis

Correct answer: B

Explanation

The correct answer is B, Correlation Events, as it specifically focuses on identifying and linking malicious activities to users. The other options do not provide the necessary correlation functionality; Current Sessions displays active connections, Current Status shows the state of the device, and Custom Analysis allows for tailored reporting but lacks direct user-related insights.