Q: 14
The event dashboard within the Cisco FMC has been inundated with low priority intrusion drop
events, which are overshadowing high priority events. An engineer has been tasked with reviewing
the policies and reducing the low priority events. Which action should be configured to accomplish
this task?
Options
Discussion
B tbh came up on a practice set and matches what you'd want: block but don't log, so the noise goes away.
saw pretty similar problem in my exam in official labs. Choosing B makes sense since 'drop packet' will block the low priority intrusion traffic without generating extra events, so the dashboard won't get cluttered. Official Cisco guides touch on this. Anyone disagree?
Be respectful. No spam.
