Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
Implementing and Operating Cisco Security Core Technologies (SCOR) · Cisco
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
Impact Flags in Cisco Firepower NGIPS (Next-Generation Intrusion Prevention System) are used to indicate how critical or impactful a threat is to the network. This requires a Network Discovery Policy.
You can configure the system to alert you whenever an intrusion event with a specific impact flag occurs. Impact flags help you evaluate the impact an intrusion has on your network by correlating intrusion data, network discovery data, and vulnerability information. https://www.cisco.com/c/en/us/td/docs/security/firepower/610/configuration/guide/fpmc-config-guide-v61/external_alerting_with_alert_responses.html#ID-2197-00000299
Because of the Network Discovery Policy you gain the use of impact flags to evaluate the severity that intrusion events have on your network. That knowledge makes possible the ability to tune intrusion rule states so that they provide maximum protection for your network assets.