Free 050-11-CARSANWLN01 – RSA NetWitness Logs & Network Administrator Exam Practice Test Question

Select all that apply, then click Submit answer.

• ○

  RSA Endpoint
  

• ○

  Respond Server
  

• ○

  Health and Wellness module
  

• ○

  Web Threat Detection
  

• ○

  Reporting Engine
  
  
  

Select all that apply, then click Submit answer.

• ○

  Meta groups
  

• ○

  Custom column groups
  

• ○

  Assigned pre-queries
  

• ○

  Automated role assignment
  

• ○

  Data privacy policies
  

• ○

  List view
  
  
  

Select all that apply, then click Submit answer.

• ○

  create a Report Rule
  

• ○

  enable email notification in the Report rule
  

• ○

  enable email notification in the Report Schedule view
  

• ○

  create an output action in the Reporting Engine configuration
  

• ○

  add the mail server as a data source to the Reporting Engine
  
  
  

Select all that apply, then click Submit answer.

• ○

  The REST interface is available only for Concentrators and Decoders
  

• ○

  The REST interface is available separately for each core Service on the Host
  

• ○

  The REST interface for the Broker service defaults to 50103
  

• ○

  The REST interface for the Concentrator service defaults to 51005
  

• ○

  The REST interface for the Decoder service defaults to 50014
  
  
  

Select all that apply, then click Submit answer.

• ○

  Keep

• ○

  Filter
  

• ○

  Truncate
  

• ○

  Index
  

• ○

  Transient
  

• ○

  Remove
  
  
  

Select an option, then click Submit answer.

• ○

  Who is Lookup Service
  

• ○

  Incident Rules
  

• ○

  ESA Analytics Mappings
  

• ○

  Context Hub
  
  
  

Select an option, then click Submit answer.

• ○

  Writes the log to the Archiver but not the Decoder
  

• ○

  Parses the log to the Decoder, but in transient mode only
  

• ○

  Adds the new Event Source to the existing list of Event Sources
  

• ○

  Ignores the log altogether
  
  
  

Select an option, then click Submit answer.

• ○

  new traffic cannot be ingested
  

• ○

  the decoder leverages capacity in the concentrator, and collection continues
  

• ○

  the decoder leverages capacity in the broker, and collection continues
  

• ○

  the oldest stored sessions are deleted and collection continues
  
  
  

Select an option, then click Submit answer.

• ○

  PAM
  

• ○

  CHAP
  

• ○

  RADIUS
  

• ○

  LDAP
  
  
  

Select an option, then click Submit answer.

• ○

  Broker
  

• ○

  Informer
  

• ○

  Spectrum
  

• ○

  Concentrator