RSA 050-11-CARSANWLN01 Exam Practice Test Instant Access

Question 1

What are the data sources available in RSA NetWitness when creating a Reporting Engine rule?

AShort, Long, Truncated

BIPDB, ODBC, FileReader

CBroker, Concentrator, Decoder

DNetWitness DB, Warehouse DB, Respond DB

Answer : D

Question 2

Parsers can be enabled on which of the following?

APacket Decoder only

BPacket Decoder and Log Decoder

CPacket Decoder and Log Decoder and Concentrator

DPacket Decoder and Log Decoder and Concentrator and Broker

Answer : B

Question 3

Which of the following is the basic building block of a report in RSA NetWitness?

ARule

BBroker

CPacket

DSession

Answer : A

Question 4

Where do you define dynamic charts for real-time display in Dashboards?

ADefault Dashboard

BMONITOR > Reports > Manage > Charts

CMONITOR > Reports > Charts > View

DCONFIGURE > ESA Rules

Answer : B

Question 5

Administrators can use the Profile feature to limit views with (Choose three)

AMeta groups

BCustom column groups

CAssigned pre-queries

DAutomated role assignment

EData privacy policies

FList view

Answer : A, B, C

Question 6

Which of the following choices describes a fundamental unit of network traffic transmitted from one IP device to another?

APacket

BChart

CSession

DSchedule

Answer : A

Question 7

Which of the following statements is true regarding Packet-based analysis in general?

APacket-based analysis is required for viewing log and session data

BPacket-based analysis is based on metadata capture reduced to packets

CPacket-based analysis can be accomplished with common tools such as Wireshark

DPacket-based analysis is accomplished using the table-map xml file

Answer : B

RSA 050-11-CARSANWLN01 RSA NetWitness Logs & Network Administrator Exam Practice Test