Completing Cloud Event Configuration on FMC
An engineer must use Cisco Secure Firewall Management Center to send Cisco Secure Firewall Threat Defense events to the cloud. The engineer performed these actions already: • FTD devices were added to FMC • FTD devices were assigned licenses Which action must be taken to complete Cisco Cloud Event Configuration?
Community Insight
The question tests the distinction between prerequisite licensing steps and the actual feature activation, with the common trap being the selection of Smart Licensing registration instead of the connector toggle.
This question addresses the final step to enable forwarding of Cisco Secure Firewall Threat Defense (FTD) events from the Management Center (FMC) to the cloud. It establishes that enabling the cloud event connector is the specific configuration action required after initial device and license setup.
Candidates often select 'Register with Cisco Smart Licensing' because it is a necessary prerequisite for many cloud features; however, since licenses are already assigned, this step is redundant or incomplete for the specific goal of enabling event forwarding.
Community Discussion (10 comments)
Comments & Corrections
No comments yet — spotted an error or have a note? Share it below.
Expert Analysis
Why the Answer Is Correct
The correct action is to enable the cloud event connector. According to Cisco documentation, once devices are added and licensed, the administrator must navigate to the System settings or the Cloud Integration section and explicitly enable the Cloud Event Connector to start streaming logs to the Cisco Secure Firewall Management Center cloud. This is the definitive 'completion' step for the configuration task described.Why the Other Options Are Wrong
Option A (Register with Cisco Smart Licensing) is incorrect because the prompt states licenses are already assigned; furthermore, Smart Licensing is a general requirement, not the specific trigger for event forwarding. Option C (Create a Cisco Cloud Region) is not a standard configuration step in FMC for basic cloud event integration. Option D (Assign a Cloud Event License) is incorrect as the prompt indicates licensing is complete, and there isn't a distinct 'Cloud Event License' separate from the base threat defense licensing.Community Comment Notes
Many users initially debated between Smart Licensing and the Connector. As AkosiRomeo noted, "Enable cloud event connector – Correct: This enables the actual mechanism to forward events to the cloud." Another user, ITVI, conceded, "you still need to enable the connector to make it happen," reinforcing that licensing is a prerequisite but enabling the connector is the completion action. One comment referenced the official admin guide confirming the need to enable Cisco Security Cloud integration.Official Reference
Exam Strategy
Always look for the word 'complete' in scenario questions. If prerequisites like licensing are stated as done, the answer is usually the specific feature toggle or policy application, not the prerequisite itself.
Frequently Asked Questions
Is Smart Licensing required before enabling cloud events?
Yes, Smart Licensing must be active and valid licenses assigned. However, if the prompt says licenses are assigned, the next step is enabling the connector.
What is the difference between Smart Licensing and Cloud Event Connector?
Smart Licensing validates your right to use software. The Cloud Event Connector is the technical component that actually pushes logs to the cloud infrastructure.