HP HP ATP - ArcSight Security V1 HP0-A116 Questions & Answers

• Question 131:

  Which host user should own the .tararchive from which the ArcSight ESM Suite bin file containing ESM components, and installation and configuration wizards is extracted?

  A. any user with admin group privilege

  B. root user

  C. arcsight user

  D. archive user

  Correct Answer: B

• Question 132:

  From where are the local ArcSight Console Preference Settings accessed?

  A. File Menu

  B. Edit Menu

  C. Tools Menu

  D. View Menu

  Correct Answer: C

• Question 133:

  What is the impact of checking Auto Update on the Search Results header, and selecting a time of 2 minutes?

  A. The time span for this search to complete is limited to 2 minutes, and the current results are displayed.

  B. The current field set is refreshed, and any results that changed in the grid are flagged with a highlight.

  C. The current search query is rerun every 2 minutes following selection of the Auto Update check box

  D. ArcSight Command Center checks for any new software updates occurring in the previous 2 minutes.

  Correct Answer: B

• Question 134:

  What must you do prior to applying a patch to the ArcSight Manager?

  A. stop the ArcSight Manager service

  B. shut down all ArcSight SmartConnectors

  C. delete all files in the tmp directory

  D. disconnect the network cable

  Correct Answer: A

• Question 135:

  Which process uncovers the relationship between events, infers the significance of those relationships, prioritizes them, and then provides a framework for taking action?

  A. categorization

  B. aggregation

  C. correlation

  D. filtration

  Correct Answer: C

• Question 136:

  Which statement is true about join rules and chained rules?

  A. Join rules link simple rules together; chained rules link join rules.

  B. Join rules use Session Lists; chained rules use Active Lists.

  C. Chained rules may or may not be join rules that also use Active Lists or rely on Correlation events generated by other rules.

  D. Chained rules result in detailed chains; join rules result in simple chains.

  Correct Answer: C

• Question 137:

  By default, which TCP/IP port is used by ArcSight Command Center to communicate with a web browser client?

  A. 1521

  B. 9443

  C. 8443

  D. 443

  Correct Answer: C

  Reference:

  http://eromang.zataz.com/2011/06/26/arcsight-logger-and-smartconnectors-questions-and- answers/

• Question 138:

  What is a Network Model?

  A. a representation of the nodes on a network and certain characteristics of the network itself

  B. a preconfigured resource used to set up ArcSight zones and communication paths

  C. a dashboard containing data monitors for network, zone, asset, and customer monitoring

  D. a diagram of network interface points and vulnerabilities

  Correct Answer: A

• Question 139:

  What is the effect of the constraints used in an event search query?

  A. They maintain search criteria within the range of data specified by the filter

  B. They provide a shorthand view when defining field sets.

  C. They limit the range or focus of data sources to be searched.

  D. They establish the time range for the search query

  Correct Answer: C

• Question 140:

  Which resource defines what a report will look like when generated?

  A. layout

  B. query

  C. template

  D. form

  Correct Answer: C