最新的RSA 050-11-CARSANWLN01免費考試真題

問題1

The Context Hub runs as a service on which Host?

A. Server

B. Concentrator

C. Decoder

D. ESA

正確答案: D

問題2

What of the following components can be used to set up external authentication for RSA NetWitness?

A. PAM

B. Broker

C. AAoP

D. Spectrum

正確答案: A

問題3

What are the pre-configured roles in RSA NetWitness?

A. EVENT_ANALYST, INTRUSION_ANALYST SOC-MANAGER, ADMIN, OPERATOR,
RESPOND_ADMINlSTRATOR

B. EVENT_STREAM_ANALYST WAREHOUSE_ANALYST, ARCHIVER_ANALYST,
DB_ANALYST ADMINISTRATOR

C. ADMINISTRATORS, OPERATORS, ANALYSTS SOC_MANAGERS, MALWARE_ANALYSTS,
DATA_PRIVACY_OFFICERS, RESPOND ADMINISTRATOR

D. MALWARE_ANALYST, ESA_ANALYST, REPORT_ANALYST ADMINISTRATOR

正確答案: C

問題4

To access device information and perform device operations through RSA NetWitness. a user must be

A. assigned read/write access to the NetWitness appliance

B. a member of a "DeviceUser" group in Active Directory

C. a member of a role that has privileges for the device

D. assigned the role of Operator"

正確答案: C

問題5

The accuracy of Automated Threat Detection is enhanced by configuring

A. Who is Lookup Service

B. ESA Analytics Mappings

C. Context Hub

D. Incident Rules

正確答案: A

問題6

To create a feed for all of your event sources, you could:

A. Deploy a feed from Live

B. Export event source data from the Manage Events Sources interface and create a custom feed

C. Create a log parser

D. Export event source data from the Manage Events Sources interface and create an identity feed

正確答案: B

問題7

In order to run Reports against data stored on the Archiver you must

A. restore the Archiver data to any Concentrator

B. restore data from cold storage to any hot storage device

C. add the Archiver to the Concentrator's list of configured data sources

D. add the Archiver to the Reporting Engine's list of configured data sources

正確答案: D

問題8

You configure an email server for notifications for everything except the Reporting Engine in:

A. ADMIN > System > Global Auditing

B. ADMIN > System > Global Notifications

C. ADMIN > System > Email

D. ADMIN > System > Legacy Notifications

正確答案: C

最新的RSA NetWitness Logs & Network Administrator - 050-11-CARSANWLN01免費考試真題

聯系我們

站內鏈接

最新更新