HP HP ATP - ArcSight Security V1 HP0-A116 Questions & Answers

• Question 121:

  Which ArcSight ESM user type provides full privileges to use the Command Center, the ArcSight Console, the Arcsight Web client, and all tools?

  A. Web User

  B. Normal User

  C. Connector Installer

  D. Management Tool

  Correct Answer: B

• Question 122:

  When is it useful to schedule rules rather than have them run in real time?

  A. when a network device is down

  B. when events are occurring less frequently than usual

  C. when you anticipate a worm or virus attack

  D. when you need to minimize impact on system performance

  Correct Answer: C

• Question 123:

  Which procedure allows you to terminate a session within a Session List? (Select two)

  A. Exceed the time-out based on entry expiration time

  B. Configure a rule action to explicitly terminate a session

  C. Manually close the session using the right-click menu.

  D. Adjust the Session setting in Console Preferences.

  E. Close the session by exiting the ArcSight Console.

  Correct Answer: AE

• Question 124:

  In Network Modeling, what is closest to being a subnet?

  A. zone

  B. network

  C. Asset Range

  D. Network Range

  Correct Answer: A

• Question 125:

  Which resources are optional ArcSight compliance solutions delivered as packages? (Select two.)

  A. SOX - Sarbanes Oxley Act

  B. PCI - Penetration Culprit Identification

  C. PCI - Payment Card industry

  D. SOX- Secure Obfuscation Extensions

  E. SOX - Security Operations Exposition

  F. PCI - Payload Content Information

  Correct Answer: BE

• Question 126:

  What does a Network Model include? (Select two.)

  A. assets

  B. destinations

  C. zones

  D. file resources

  Correct Answer: AC

• Question 127:

  What do you use to establish identity, ownership, and criticality of the assets you have installed on your network?

  A. asset types

  B. asset groups

  C. asset categories

  D. asset ranges

  Correct Answer: C

• Question 128:

  What is a trust store (sometimes called a key store)?

  A. the preferred source for obtaining signed certificates

  B. a list of trusted Certificate Authorities

  C. the location of a system's private keys

  D. the set of backup files containing SSL information

  Correct Answer: B

• Question 129:

  What stores information about logons, user actions, and the resulting events in the most concise way?

  A. Event annotations

  B. Session Lists

  C. Active Lists

  D. Cases

  Correct Answer: B

• Question 130:

  Which pairs of resources can be displayed in the ArcSight Web interface? (Select two.)

  A. Search Filters and Saved Searches

  B. Queries and Cases

  C. Reports and Dashboards

  D. Notifications and Active Channels

  E. Knowledge Base articles and Templates

  Correct Answer: CE