HP HP ATP - ArcSight Security V1 HP0-A100 Questions & Answers

• Question 41:

  Which database management system technology is utilized by the Arc Sight ESM 6.5c?

  A. DB2

  B. CORR-Engine

  C. SQL Server Express Edition

  D. Oracle 10g

  Correct Answer: B

• Question 42:

  What are the features that allow you to use Arc Sight Logger throughout your network?

  A. Logger has pre-packaged content with forensics on-the-fly capability.

  B. Logger allows you to deploy a single solution to manage all log data across your enterprise.

  C. Logger uses a pattern matching and anomaly detection system to find very subtle and sophisticated threats.

  D. Logger has two deployment options with a detached database.

  Correct Answer: A

• Question 43:

  Which feature of Arc Sight Smart Connectors reduces the quantity of events sent to the ESM Manager?

  A. Normalization

  B. Host name lookup

  C. Categorization

  D. Aggregation

  Correct Answer: D

• Question 44:

  How many ESM event schema groups are there?

  A. 5

  B. 17

  C. 300

  D. 400

  Correct Answer: B

• Question 45:

  Which ESM component does the Event Priority Evaluation and Asset Model look up?

  A. ESM console

  B. CORR engine

  C. Smart Connectors

  D. ESM manager

  Correct Answer: C

• Question 46:

  In which phase are functions from the ESM Console (such as NS lookup, Ping, Port info, Trace route and who is) performed?

  A. Workflow

  B. Analysis

  C. Trending

  D. Correlation

  Correct Answer: B

• Question 47:

  Which HP Enterprise Security Product analyzes and correlates every event that occurs across the organization to deliver accurate prioritization of security risks and compliance violations?

  A. Smart Connector

  B. Connector Appliance

  C. Logger

  D. Enterprise Security Manager

  Correct Answer: D

• Question 48:

  Which statement is correct?

  A. Smart Connectors cannot execute commands.

  B. Smart Connect or installers are operating system independent

  C. Smart Connectors use the Event Category Model to describe normalized events

  D. Smart Connectors correlate events from raw data.

  Correct Answer: C

• Question 49:

  In the Workflow phase, what are Annotations?

  A. Annotations are a field in the ESM event schema that enables you to flag events far follow up

  B. Annotations are pointers to an internal or external web page where a user can find more information about vulnerable

  C. Annotations are a monitoring tool used by Security Operation Centers

  D. Annotations are an ESM resource to export event data to third-party products, such as BMC Remedy

  Correct Answer: C

• Question 50:

  What is ArcSight Express?

  A. An appliance that builds and maintains a detailed understanding of your network's topology, enabling you to centrally manage your infrastructure

  B. An appliance used for long term log data retention and forensics, with very high through put

  C. An appliance to host and "linage multiple Smart Connectors in a single device

  D. An appliance combining ESM functionality with an easy-to-deploy security monitoring and response system

  Correct Answer: C