1. Home
  2. HP
  3. HP0-A116

HP ArcSight ESM Security Administrator and Analyst

Exam Details

  • Exam Code
    :HP0-A116
  • Exam Name
    :HP ArcSight ESM Security Administrator and Analyst
  • Certification
    :HP ATP - ArcSight Security V1
  • Vendor
    :HP
  • Total Questions
    :179 Q&As
  • Last Updated
    :Mar 24, 2025

HP HP ATP - ArcSight Security V1 HP0-A116 Questions & Answers

  • Question 11:

    How can you restore a new ArcSight Web installation to a previous configuration?

    A. copy the old ArcSight Web installation's config directory and cacerts file into the new installation

    B. copy the ArcSight Manager's config directory into the new installation

    C. manually reconfigure the new installation

    D. connect to the Manager and download the saved configuration

  • Question 12:

    Why would you lock a Case?

    A. to close and archive a Case

    B. to prevent others from modifying the Case while you edit or attach something to the Case

    C. to prevent the Case from being seen in the Resource List

    D. to preserve the state of the Case

  • Question 13:

    Which ArcSight Foundation should you use to identify and analyze unexpected modifications to systems, devices, or applications?

    A. Configuration Monitoring

    B. Intrusion Monitoring

    C. ArcSight Administration

    D. Network Monitoring

  • Question 14:

    How do asset categorization and event categorization relate to each other?

    A. Asset categorization and event categorization are the same.

    B. Asset categorization and event categorization use the same field set to apply categories to assets and events.

    C. Asset categorization requires custom FlexConnectors; event categorization uses standard SmartConnectors.

    D. Asset categorization is the fingerprint of an asset; event categorization is a set of criteria that describes an event.

  • Question 15:

    Which statement is true about the ArcSight Web interface?

    A. Data Monitors cannot be added to a Dashboard in the ArcSight Web interface.

    B. Reports cannot be formatted in the ArcSight Web interface.

    C. Inline filters cannot be used in the ArcSight Web interface.

    D. Cases cannot be modified in the ArcSight Web interface.

  • Question 16:

    Which command is used to check the status of the TNS Listener?

    A. lsnrctl status

    B. listener status

    C. tnsstat

    D. oralistener status

  • Question 17:

    Which output formats are available when running a report? (Select two.)

    A. XML

    B. HTML

    C. PDF

    D. JPEG

  • Question 18:

    Which ArcSight ESM Resource enables you to perform live monitoring of events?

    A. Cases

    B. Active Channels

    C. Stages

    D. Knowledge Base

  • Question 19:

    Of the 17 event field groups defined in the ArcSight Event Schema, in which group can data fields describing an event's importance as assessed by ArcSight ESM be found?

    A. Category

    B. Attacker

    C. Event

    D. Threat

  • Question 20:

    When configuring the ArcSight Database, what is the result of setting the offline archive period (Days) to Zero?

    A. Partition Archiving is enabled.

    B. Partition Archiving is disabled.

    C. Online retention is enabled.

    D. Online reserved period is enabled.

Related Exams:

Tips on How to Prepare for the Exams

Nowadays, the certification exams become more and more important and required by more and more enterprises when applying for a job. But how to prepare for the exam effectively? How to prepare for the exam in a short time with less efforts? How to get a ideal result and how to find the most reliable resources? Here on Vcedump.com, you will find all the answers. Vcedump.com provide not only HP exam questions, answers and explanations but also complete assistance on your exam preparation and certification application. If you are confused on your HP0-A116 exam preparations and HP certification application, do not hesitate to visit our Vcedump.com to find your solutions here.