Implementing and Operating Cisco Security Core Technologies (SCOR) — Question 194

How does Cisco Umbrella archive logs to an enterprise-owned storage?

Answer options

• A. by using the Application Programming Interface to fetch the logs
• B. by sending logs via syslog to an on-premises or cloud-based syslog server
• C. by the system administrator downloading the logs from the Cisco Umbrella web portal
• D. by being configured to send logs to a self-managed AWS S3 bucket

Correct answer: D

Explanation

The correct answer is D because Cisco Umbrella can be configured to send logs directly to an AWS S3 bucket that the enterprise manages. Option A is incorrect as it refers to fetching logs rather than archiving them, while B discusses syslog transmission, which is not specifically for enterprise storage. Option C is not valid as it involves manual downloading rather than automated archiving.