RSA 050-11-CARSANWLN01 Exam Practice Test Instant Access

Question 1

Parsers can be enabled on which of the following?

APacket Decoder only

BPacket Decoder and Log Decoder

CPacket Decoder and Log Decoder and Concentrator

DPacket Decoder and Log Decoder and Concentrator and Broker

Answer : B

Question 2

Which of the following is the basic building block of a report in RSA NetWitness?

ARule

BBroker

CPacket

DSession

Answer : A

Question 3

Where do you define dynamic charts for real-time display in Dashboards?

ADefault Dashboard

BMONITOR > Reports > Manage > Charts

CMONITOR > Reports > Charts > View

DCONFIGURE > ESA Rules

Answer : B

Question 4

Administrators can use the Profile feature to limit views with (Choose three)

AMeta groups

BCustom column groups

CAssigned pre-queries

DAutomated role assignment

EData privacy policies

FList view

Answer : A, B, C

Question 5

Which of the following choices describes a fundamental unit of network traffic transmitted from one IP device to another?

APacket

BChart

CSession

DSchedule

Answer : A

Question 6

To create meta keys that will appear in the Investigation view, you would most commonly edit configuration files on the

APacket Decoder

BConcentrator

CBroker

DLog Decoder

Answer : B

Question 7

To create a custom feed, initiate the action by selecting which top-level module?

AInvestigate

BAdmin

CMonitor

DConfigure

Answer : D

RSA 050-11-CARSANWLN01 RSA NetWitness Logs & Network Administrator Exam Practice Test