WEBVTT 1 00:00.000 --> 00:06.700 So, for this challenge, we're asked to answer some questions here that we 2 00:06.700 --> 00:07.080 should be able 3 00:07.080 --> 00:10.560 to find in the Umbrella Graphical Interface. 4 00:10.560 --> 00:16.960 Now, as is mentioned in the text above, keep in mind that this is a live Cisco 5 00:16.960 --> 00:18.080 environment 6 00:18.080 --> 00:20.640 that we do not have control over. 7 00:20.640 --> 00:25.440 Therefore, your answers will clearly be different than mine. 8 00:25.440 --> 00:30.190 The point of this is not to get the correct answer, but to make sure that we WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000 8 00:25.440 --> 00:30.190 The point of this is not to get the correct answer, but to make sure that we 9 00:30.190 --> 00:30.800 know where 10 00:30.800 --> 00:34.800 to find the answer in the Umbrella Interface. 11 00:34.800 --> 00:38.320 So that said, let's take a look at our first question here. 12 00:38.320 --> 00:44.640 How many web security blocks have occurred in the last seven days? 13 00:44.640 --> 00:49.050 This is actually information that we can get right here on the Overview page, 14 00:49.050 --> 00:49.440 but we do 15 00:49.440 --> 00:55.180 need to change our timing to not be the last 24 hours, but rather the last 16 00:55.180 --> 00:56.360 seven days. 17 00:56.360 --> 01:01.570 Once we change that, we can scroll down here to the Network Breakdown and WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000 17 00:56.360 --> 01:01.570 Once we change that, we can scroll down here to the Network Breakdown and 18 01:01.570 --> 01:02.760 change to Web. 19 01:02.760 --> 01:10.160 And then for the Web Security Blocks, currently there have been 7,950. 20 01:10.160 --> 01:15.760 So that would be our answer for Web Security Blocks for the last seven days. 21 01:15.760 --> 01:21.640 Next, it wants to know how many roaming computers are currently active in the 22 01:21.640 --> 01:23.000 environment. 23 01:23.000 --> 01:26.160 This is actually going to be under deployments. 24 01:26.160 --> 01:31.550 So if we go over here to deployments and we go to roaming computers, we could WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000 24 01:26.160 --> 01:31.550 So if we go over here to deployments and we go to roaming computers, we could 25 01:31.550 --> 01:32.280 of course 26 01:32.280 --> 01:36.840 scroll down here and count them, but it actually tells us right up here at the 27 01:36.840 --> 01:37.320 top that there 28 01:37.320 --> 01:40.280 are currently seven total. 29 01:40.280 --> 01:43.160 So that's a fairly straightforward answer. 30 01:43.160 --> 01:50.140 So the next question is, what is the total number of security requests in the 31 01:50.140 --> 01:51.080 last 30 32 01:51.080 --> 01:52.080 days? 33 01:52.080 --> 01:58.080 Well, to see the total number of security threats, we're going to want to go to 34 01:58.080 --> 01:58.200 reporting and 35 01:58.200 --> 02:00.920 we're going to choose top threats. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000 35 01:58.200 --> 02:00.920 we're going to choose top threats. 36 02:00.920 --> 02:05.280 So right off the bat, this is going to show us all threat types. 37 02:05.280 --> 02:11.310 However, it's again defaulting to the last 24 hours and we're supposed to say 38 02:11.310 --> 02:12.600 30 days. 39 02:12.600 --> 02:18.480 So we need to come over here again to our timeframe, change this to the last 30 40 02:18.480 --> 02:18.600 days, 41 02:18.600 --> 02:23.680 and now we can see under all threat types that the total number of security 42 02:23.680 --> 02:24.440 requests 43 02:24.440 --> 02:27.720 is 12,080. 44 02:27.720 --> 02:31.320 So that's going to be the correct answer to that question. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000 44 02:27.720 --> 02:31.320 So that's going to be the correct answer to that question. 45 02:31.320 --> 02:39.120 Finally, which security settings are enabled in the default Web Policy Rule Set 46 02:39.120 --> 02:39.120 ? 47 02:39.120 --> 02:42.520 To see this, we're going to have to go to policies. 48 02:42.520 --> 02:47.080 This is a Web Policy for the default Web Policy it said. 49 02:47.080 --> 02:52.670 So if we click on this and we scroll down under security settings here, we can 50 02:52.670 --> 02:53.280 do this 51 02:53.280 --> 02:54.920 one of two ways. 52 02:54.920 --> 02:59.320 We can either put our mouse over this and it'll tell us that there are three 53 02:59.320 --> 02:59.920 settings 54 02:59.920 --> 03:06.950 enabled and they are command and control callback, malware, and phishing attack WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000 54 02:59.920 --> 03:06.950 enabled and they are command and control callback, malware, and phishing attack 55 03:06.950 --> 03:06.960 . 56 03:06.960 --> 03:11.140 We could also see this, of course, if we click edit, it'll show us that those 57 03:11.140 --> 03:11.920 three things 58 03:11.920 --> 03:13.440 are enabled. 59 03:13.440 --> 03:19.880 So those are the three security settings that are enabled for the default Web 60 03:19.880 --> 03:20.000 Policy. 61 03:20.000 --> 03:22.640 And that concludes this challenge. 62 03:22.640 --> 03:25.830 If you find that you were not able to answer any of these questions, I would 63 03:25.830 --> 03:26.400 encourage 64 03:26.400 --> 03:32.360 you to spend a little more time getting used to the Cisco umbrella interface. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000 64 03:26.400 --> 03:32.360 you to spend a little more time getting used to the Cisco umbrella interface. 65 03:32.360 --> 03:37.320 Otherwise, congratulations on completing exploring Cisco umbrella. 66 03:37.320 --> 03:41.520 I hope this has been informative for you and I'd like to thank you for viewing. 67 03:41.520 --> 03:51.520 [BLANK_AUDIO]