Q: 20
DRAG DROP An engineer must configure AsyncOS for Cisco Secure Web Appliance to push log files to a syslog server using the SCP retrieval method. Drag and drop the steps from the left into the sequence on the right to complete the configuration. 
Drag & Drop
Discussion
Step 1: Set SCP as log subscription, Step 2: Add SSH public host key, Step 3: Add keys to remote, Step 4: Commit-order matters since trust setup can't be after subscription is saved. Saw one where skipping host key flipped it.
Not quite right, I think the correct mapping is file access from a different user → learns normal behavior, interesting file access → sensitive files, user login suspicious behavior → access failures/methods, privilege escalation → process lineage movement. Trap is mixing up the first two!
privilege escalation → Tetration platform learns the normal behavior of users
user login suspicious behavior → Tetration platform is armed to look at sensitive files
interesting file access → Tetration platform watches user access failures and methods
file access from a different user → Tetration platform watches for movement in the process lineage tree
Really clear drag and drop format, similar to some practice sets I've tried.
user login suspicious behavior → Tetration platform is armed to look at sensitive files
interesting file access → Tetration platform watches user access failures and methods
file access from a different user → Tetration platform watches for movement in the process lineage tree
Really clear drag and drop format, similar to some practice sets I've tried.
Be respectful. No spam.