최신 050-11-CARSANWLN01 무료덤프 - RSA NetWitness Logs & Network Administrator

문제1

To use RSA SecurlD as an authentication method for administrators, what must be configured?

A. RADIUS

B. PAM

C. LDAP

D. CHAP

정답: B

문제2

The NetWitness Trust Model is based on

A. IP address

B. User ID

C. Hardware address

D. User Role

정답: D

문제3

To prevent a Meta key from being indexed on a core service, you can

A. disable the parser for the Meta key in the device configuration

B. add the value /eve/= indexNone to the key in the custom index file

C. add the value valueMax= ''000000'' to the key in the custom index file

D. remove the Meta key from the Manage Default Meta Keys interface

정답: C

문제4

The logical operators available for Querying in Investigations depend on the Index Level of the individual meta key Which Index Level limits your query to the logical operators "exists'' and 'texists""?

A. IndexNone

B. IndexKeys

C. IndexAII

D. IndexValues

정답: B

문제5

When adding a data source to the ESA device. RSA recommends using only the

A. Decoder

B. Concentrator

C. Archiver

D. Log Collector

정답: B

문제6

What are three important things to configure on a Log Decoder'?

A. Capture Settings. Aggregation Auto-Start. Profile settings

B. Capture Auto-Start. Service Parsers, Capture Interface

C. Aggregation Auto-Start. Capture Settings. Investigation Settings

D. Investigation Settings. Capture Settings. Service Parsers

정답: B

문제7

The Context Hub runs as a service on which Host?

A. Decoder

B. Server

C. Concentrator

D. ESA

정답: D

최신 050-11-CARSANWLN01 무료덤프 - RSA NetWitness Logs & Network Administrator

우리와 연락하기

유용한 링크

최신 업데이트