HP HP ATP - ArcSight Security V1 HP0-A116 Questions & Answers

• Question 51:

  Using ESM 6.5 ArcSight Command Center, which drill down type is available?

  A. query viewer drilldowns into other query viewers only

  B. query viewer drilldowns into channels, reports, dashboards, or other query viewers

  C. dashboard drilldowns into channels, reports, query viewers, or other dashboards

  D. dashboard drilldowns into other dashboards only

  Correct Answer: B

• Question 52:

  Which statement is true about SmartConnectors and FlexConnectors?

  A. FlexConnectors allow creation of SmartConnectors that are tailored to individualized custom situations and specific security event data.

  B. FlexConnectors are plug-and-play, self-programming SmartConnectors.

  C. SmartConnectors do not include tools for customizing FlexConnectors.

  D. SmartConnectors are vendor-specific and must be purchased through the individual device vendors.

  Correct Answer: A

• Question 53:

  What do the start and end times associated with a notification destination indicate?

  A. the period of time that the system waits for a notification response

  B. the period of time during which the notification can be received

  C. the period of time during which the destination is expected to respond

  D. the period of time during which the notification can be sent to the destination

  Correct Answer: D

• Question 54:

  Which statement is true about starting and stopping ArcSight SmartConnector services?

  A. They are started and stopped independently of the other ArcSight component services.

  B. The order in which they are started and stopped is based on event flow.

  C. How they are started and stopped depends on whether or not the ArcSight Manager is running.

  D. They are started and stopped in conjunction with the Oracle database services.

  Correct Answer: A

• Question 55:

  Which string function is used to join two data fields?

  A. Correlate

  B. Concatenate

  C. Substring

  D. Find

  Correct Answer: B

• Question 56:

  Report run start time, output format for report results, email distribution for report results, and report filters are all examples of what?

  A. report parameters

  B. report formats

  C. report data sources

  D. report attributes

  Correct Answer: A

• Question 57:

  Asset categories can be assigned to zones as well as assets. What happens to the assets that belong to a zone with a category of "Critical"?

  A. All assets in the zone inherit the zone's category.

  B. Nothing happens. Assets in the zone maintain their own individual category identities.

  C. Assets with a category that matches the zone category are grouped into a "Critical" asset group.

  D. Assets in the zone inherit the zone's category and are grouped into a "Critical" asset group.

  Correct Answer: B

• Question 58:

  Which statement is true about how filters are applied by the Connector or by the Manager?

  A. When filters are applied by either the Connector or the Manager, events that match the filter conditions are selected and forwarded for further processing.

  B. When filters are applied by either the Connector or the Manager, events that match the filter conditions are excluded and are not forwarded for further processing.

  C. Events that match the Connector filter are excluded and not forwarded further; events that match the Manager filter are selected for further analysis.

  D. Events that match the Connector filter are included and forwarded to the Manager; events that match the Manager filter are excluded.

  Correct Answer: C

• Question 59:

  What is a good way for an operator or analyst to quickly determine which events must be addressed first?

  A. check the priority rating in a Dashboard or Active Channel

  B. run a report of High Priority Threats

  C. ask more senior analysts or architects

  D. view the Event Grid and Correlation categories

  Correct Answer: A

• Question 60:

  Which components does a Network Model include? (Select two.)

  A. assets

  B. data monitors

  C. dashboards

  D. zones

  Correct Answer: AD