Implementing and Operating Cisco Security Core Technologies (SCOR) — Question 205

An organization has a requirement to collect full metadata information about the traffic going through their AWS cloud services. They want to use this information for behavior analytics and statistics. Which two actions must be taken to implement this requirement? (Choose two.)

Answer options

• A. Send syslog from AWS to Cisco Stealthwatch Cloud.
• B. Configure Cisco Stealthwatch Cloud to ingest AWS information.
• C. Send VPC Flow Logs to Cisco Stealthwatch Cloud.
• D. Configure Cisco Thousand Eyes to ingest AWS information.
• E. Configure Cisco ACI to ingest AWS information.

Correct answer: B, C

Explanation

The correct actions are to configure Cisco Stealthwatch Cloud to ingest AWS information (B) and send VPC Flow Logs to Cisco Stealthwatch Cloud (C). Option A is incorrect because simply sending syslog does not fulfill the requirement for full metadata. Options D and E involve other Cisco products that are not specifically designed for this task in relation to AWS traffic.