NOC Capability Test

What tool is used to show and review syslog data of network devices?

• CA Performance

• Kibana

• Netscout

• Identity Central

In Kibana what do you input in the field data view to view firewall logs?

• firewall*

• switch*

• cisco-ise*

• router*

In Kibana what filter is used to view/sort source IP addresses?

• source.port

• source.mac

• source.ip

• source.address

In Kibana what filter is used to view/sort destination IP addresses?

• destination.mac

• destination.address

• destination.port

• destination.ip

What filter is used to view/sort destination ports?

• destination.mac

• destination.port

• destination.ip

• destination.address

What field will you look at to determine if a traffic is allowed/denied by the firewall?

• event.reason

• observer.policy

• observer.reason

• event.action

What field is used to determine what firewall inspected the traffic?

• observer.hostname

• appliance.id

• host.id

• appliance.name

What field is viewed to know the user realm in Pulse/Ivanti VPN?

• user.target_roles

• user.target_id

• user.owner.id

• user.realm

What field is checked to know the reason behind a VPN/UAC disconnection?

• event.end

• event.type

• action.reason

• action.type

What field is used to filter a user id experiencing authentication failures?

• source.id

• user.domain

• user.name

• user.agent