Implementing and Operating Cisco Security Core Technologies (SCOR) — Question 113

A network engineer must monitor user and device behavior within the on-premises network. This data must be sent to the Cisco Stealthwatch Cloud analytics platform for analysis. What must be done to meet this requirement, using the Ubuntu-based VM appliance deployed in a VMware-based hypervisor?

Answer options

• A. Deploy a Cisco FTD sensor to send network events to Cisco Stealthwatch Cloud.
• B. Configure a Cisco FMC to send syslogs to Cisco Stealthwatch Cloud.
• C. Deploy the Cisco Stealthwatch Cloud PNM sensor that sends data to Cisco Stealthwatch Cloud.
• D. Configure a Cisco FMC to send NetFlow to Cisco Stealthwatch Cloud.

Correct answer: C

Explanation

The correct answer is C, as deploying the Cisco Stealthwatch Cloud PNM sensor enables the system to send relevant data directly to the Cisco Stealthwatch Cloud for analysis. Options A and D involve different sensors and data types that do not meet the specific requirement for the Ubuntu VM appliance, while option B focuses on syslogs, which are not the primary data type needed in this scenario.