HP ArcSight ESM 6.5 Security Administrator and Analyst - HP0-A116무료 덤프문제 풀어보기

A. providing a quick way to run SQL queries and identify trends without running reports

B. presenting detailed comparisons of report elements, not possible with reporting tools

C. determining which devices are off-line at any given point in time by querying their status

D. providing a baseline analysis of events against which future queries can be compared

E. displaying the Boolean logic and conditions linkage behind filters ana rules criteria

A. Assets require a MAC address to be categorized properly.

B. Assets can be grouped in folders called asset ranges.

C. An asset is any endpoint considered significant enough to characterize with details to help with correlation and reporting.

D. Assets can include bridges, routers, web servers, or anything with an IP or MAC address.

A. Online retention is enabled.

B. Online reserved period is enabled.

C. Partition Archiving is disabled.

D. Partition Archiving is enabled.

A. Form

B. Template

C. Query

D. Layout

A. Retention areas can be configured using the Partition Management Wizard.

B. If the size of a retention area is reduced, the data outside of the retention area is automatically backed up.

C. Archived partitions outside the offline archive period become invalid.

D. Retention policies cannot be changed once they are set.

A. Arcsight database pc

B. Arcsight retention create

C. Arcsight archive install

D. Arcsight database create

A. Baselines are created using query results and fed into the Image Editor for the related Data Monitor.

B. Baselines are created using rules. After the rule is triggered, the resulting action establishes a baseline against which future rules are evaluated in the Query Viewer.

C. Baselines are created using query results. When a query has one or more baselines available, you can compare the current results with the baseline.

D. Baselines are created using query results. The baseline from the query is used to create a new field set definition that can be run against future events.

A. data that is no longer needed by ESM

B. a partition that resides within the database

C. a partition that exceeds the online retention threshold and is therefore archived

D. a partition reserved for a future date

A. determine which devices are off-line at any given point in time by querying their status

B. provide a baseline analysis of events against which future queries can be compared

C. display the Boolean logic behind filters and rules

D. present detailed comparisons of report elements, not possible with the reporting tool

E. provide a quick way to run SQL queries and identify trends without running reports

A. a preconfigured resource used to set up ArcSight zones and communication paths

B. a dashboard containing data monitors for network, zone, asset, and customer monitoring

C. a diagram of network interface points and vulnerabilities

D. a representation of the nodes on a network and certain characteristics of the network itself