RSA 050-11-CARSANWLN01 Exam Practice Test Instant Access

Question 1

What is the main purpose of creating a meta group?

AIsolate log data

BPerform Visualization analysis

CEliminate unneeded keys

DIncrease the amount of data available for analysis

Answer : C

Question 2

The types of feeds that you can add to RSA NetWitness are:

APublic feed, private feed

BCustom feed. Live feed

CIdentity feed, resource feed

DCustom feed, identity feed

Answer : D

Question 3

Which storage options are available for Archiver storage?

ADAC, SAN. and NAS

BNAS and SAN

CDAS and NAS

DJBOD and DAS

Answer : A

Question 4

Which RSA NetWitness component captures and parses data off the wire?

APacket Decoder

BBroker

CConcentrator

DLog Decoder

Answer : A

Question 5

Which statement about Health and Wellness Alarm Suppression is false?

ASuppression schedules can be defined for individual rules

BSuppression schedules can be defined for entire policies

CSuppression schedules can be applied to out-of-the-box policies

DMultiple suppression schedules can be defined

Answer : B

Question 6

Which of the following statements is true regarding Packet-based analysis in general?

APacket-based analysis is required for viewing log and session data

BPacket-based analysis is based on metadata capture reduced to packets

CPacket-based analysis can be accomplished with common tools such as Wireshark

DPacket-based analysis is accomplished using the table-map xml file

Answer : B

Question 7

To add an action to the right-click menu in the Investigation Ul. create a

ARight-click action

BProfile

CContext Hub List

DContext Menu Action

Answer : D

RSA 050-11-CARSANWLN01 RSA NetWitness Logs & Network Administrator Exam Practice Test