最新的Novell 050-728免費考試真題

問題1

What feature enables the evaluation and reporting of events across multiple event sources with different logging formats? (Choose 2)

A. correlation engine

B. iTrac service

C. crystal reports

D. Taxonomy

E. Event normalization

正確答案: B,E

說明：（僅 Fast2test 成員可見）

問題2

Which of the following RuleLG commands acts as an AND function?

A. Flow

B. Union()

C. Intersection()

D. Sequence()

正確答案: C

問題3

To achieve better system performance and scalability in regards to Event collection and processing, which Sentinel components can you install multiple instances of? (Choose 2)

A. Collection Manager

B. Reporting server

C. Sentinel Control centre

D. Solution Designer

E. Correlation engine

正確答案: A,E

說明：（僅 Fast2test 成員可見）

問題4

What does a red line indicate in the tabular part of an active view?

A. More events were received than could be displayed

B. Data was dropped by Sentinel

C. A severe event occurred

D. A collector error occurred

正確答案: A

問題5

You create and deploy a correlation rule with a Create incident action that also indicates an iTRAC workflow. After having the rule on for an hour, you find that the system has created several hundred workflow processes. What steps can you take to address this problem? (Choose 2)

A. Configure the Data retention field in the Sentinel Data Manager

B. Set the maximum incidents setting to 10 in the correlation action definition

C. Change the Update Criteria to do not perform actionsevery time this rule fires for the next 1 hour

D. Adjust the definition of the rule so the threshold for triggering an event is higher

E. Change the iTRAC settings in the configuration xml file

正確答案: B,E

問題6

Within an active view, what does the Event table represent?

A. Incidents

B. Correlation events

C. Individual events and their data

D. Event batch updates

正確答案: A

最新的Novell Identity and Security PartnerNet Specialization: Sentinel 6.1 - 050-728免費考試真題

聯系我們

站內鏈接

最新更新