HP HP ATP - ArcSight Security V1 HP0-A116 Questions & Answers

• Question 71:

  Which ArcSight Foundation should you use to identify traffic and bandwidth usage?

  A. Configuration Monitoring

  B. Intrusion Monitoring

  C. ArcSight Administration

  D. Network Monitoring

  Correct Answer: D

• Question 72:

  Which ESM components collect event data?

  A. SmartConnectors

  B. events

  C. resources

  D. nodes

  Correct Answer: A

• Question 73:

  What must be done to a local Variable before it can be used with multiple resources?

  A. It must be renamed.

  B. It must be copied.

  C. It must be moved it to a new resource.

  D. It must be promoted to a Global Variable.

  Correct Answer: D

• Question 74:

  Which statements are true about escalation levels? (Select two.)

  A. Custom escalation levels can be added at anytime.

  B. They must be defined separately for each notification type.

  C. New escalation levels are added to the beginning of an escalation level sequence.

  D. They are contained in notification group configurations.

  E. They must be created in the order in which you want escalation to proceed.

  Correct Answer: BE

• Question 75:

  Which visualization display functions are possible with Dashboards? (Select two.)

  A. fade in/out

  B. slide show

  C. annotate

  D. zoom in/out

  E. crop

  Correct Answer: BD

• Question 76:

  Which functions does a non-event based Data Monitor perform?

  A. evaluates the event stream and creates Correlation events when anomalies are discovered

  B. monitors and displays rule and filter data flow thresholds and latencies

  C. summarizes and displays event-based Data Monitor statistics

  D. monitors and displays ArcSight ESM system and platform status

  Correct Answer: D

• Question 77:

  Using SSL technology, information can be communicated over an encrypted channel. What is SSL?

  A. Secure Sockets Layer

  B. Security Standards Layer

  C. Smart Stealth Layer

  D. Standard Security Layer

  Correct Answer: A

• Question 78:

  You want your Active Channel to automatically display new events as they arrive at ESM. Which time parameter you use to accomplish this?

  A. Continuously Evaluate

  B. Evaluate Continuously from Attach Time

  C. Evaluate $NOW-1h

  D. Evaluate Once at Attach Time

  Correct Answer: C

• Question 79:

  Active Channel views and Dashboard views are examples of Viewer Panel views. Which other views are associated with the Viewer Panel? (Select two.)

  A. Asset views

  B. Resource views

  C. Combined views

  D. Simple views

  E. Results views

  Correct Answer: BE

• Question 80:

  What do the start and end times associated with a notification destination indicate?

  A. the period of time the system will wait for a notification response

  B. the period of time during which the destination is expected to respond

  C. the period of time during which the notification can be sent

  D. the period of time during which the notification can be received

  Correct Answer: C