050-11-CARSANWLN01 Dumps
          050-11-CARSANWLN01 Braindumps
          050-11-CARSANWLN01 Real Questions
          050-11-CARSANWLN01 Practice Test
          050-11-CARSANWLN01 Actual Questions












































            RSA





            050-11-CARSANWLN01





            RSA NetWitness Logs & Network Administrator










            https://killexams.com/pass4sure/exam-detail/050-11-CARSANWLN01

















    Question: 11


    To add an action to the right-click menu in the Investigation Ul. create a


    A. Right-click action
    B. Profile
    C. Context Hub List
    D. Context Menu Action

    Answer: D


    Question: 12

    Parsers can be enabled on which of the following?


    A. Packet Decoder only
    B. Packet Decoder and Log Decoder
    C. Packet Decoder and Log Decoder and Concentrator
    D. Packet Decoder and Log Decoder and Concentrator and Broker

    Answer: B


    Question: 13

    Which of the following choices describes a fundamental unit of network traffic transmitted from one IP device to
    another?


    A. Packet
    B. Chart
    C. Session
    D. Schedule


    Answer: A

    Question: 14


    What are the data sources available in RSA NetWitness when creating a Reporting Engine rule?


    A. Short, Long, Truncated
    B. IPDB, ODBC, FileReader
    C. Broker, Concentrator, Decoder
    D. NetWitness DB, Warehouse DB, Respond DB


    Answer: D

    Question: 15


    Which of the following rule types relies on two or more events occurring within a specified window of time?


    A. Network Rule
    B. Application Rule
    C. Correlation Rule
    D. BPF Filter Rule

    Answer: C


    Question: 16


    What are the two basic operations you might perform to make use of a Live resource?

    A. move and copy
    B. download and enable
    C. save and apply
    D. subscribe and deploy

    Answer: D


    Question: 17


    Service Groups are used primarily for

    A. grouping metadata from specified hosts
    B. deploying Live resources to specified services
    C. grouping hosts for batch configuration
    D. grouping hosts for monitoring performance in the Health and Wellness view

    Answer: B


    Question: 18


    The NetWitness Trust Model is based on

    A. User ID
    B. User Role
    C. IP address
    D. Hardware address

    Answer: B


    Question: 19


    What are three important things to configure on a Log Decoder'?

    A. Capture Auto-Start. Service Parsers, Capture Interface
    B. Capture Settings. Aggregation Auto-Start. Profile settings


    C. Investigation Settings. Capture Settings. Service Parsers
    D. Aggregation Auto-Start. Capture Settings. Investigation Settings

    Answer: A


    Question: 20

    Where do you define dynamic charts for real-time display in Dashboards?


    A. Default Dashboard
    B. MONITOR > Reports > Manage > Charts
    C. MONITOR > Reports > Charts > View
    D. CONFIGURE > ESA Rules

    Answer: B








                         6$03/( 48(67,216








            7KHVH TXHVWLRQV DUH IRU GHPR SXUSRVH RQO\  )XOO YHUVLRQ LV

            XS WR GDWH DQG FRQWDLQV DFWXDO TXHVWLRQV DQG DQVZHUV


            .LOOH[DPV FRP LV DQ RQOLQH SODWIRUP WKDW RIIHUV D ZLGH UDQJH RI VHUYLFHV UHODWHG WR FHUWLILFDWLRQ
            H[DP SUHSDUDWLRQ  7KH SODWIRUP SURYLGHV DFWXDO TXHVWLRQV  H[DP GXPSV  DQG SUDFWLFH WHVWV WR
            KHOS LQGLYLGXDOV SUHSDUH IRU YDULRXV FHUWLILFDWLRQ H[DPV ZLWK FRQILGHQFH  +HUH DUH VRPH NH\
            IHDWXUHV DQG VHUYLFHV RIIHUHG E\ .LOOH[DPV FRP


            $FWXDO ([DP 4XHVWLRQV  .LOOH[DPV FRP SURYLGHV DFWXDO H[DP TXHVWLRQV WKDW DUH H[SHULHQFHG
            LQ WHVW FHQWHUV  7KHVH TXHVWLRQV DUH XSGDWHG UHJXODUO\ WR HQVXUH WKH\ DUH XS WR GDWH DQG
            UHOHYDQW WR WKH ODWHVW H[DP V\OODEXV  %\ VWXG\LQJ WKHVH DFWXDO TXHVWLRQV  FDQGLGDWHV FDQ
            IDPLOLDUL]H WKHPVHOYHV ZLWK WKH FRQWHQW DQG IRUPDW RI WKH UHDO H[DP

            ([DP 'XPSV  .LOOH[DPV FRP RIIHUV H[DP GXPSV LQ 3') IRUPDW  7KHVH GXPSV FRQWDLQ D
            FRPSUHKHQVLYH FROOHFWLRQ RI TXHVWLRQV DQG DQVZHUV WKDW FRYHU WKH H[DP WRSLFV  %\ XVLQJ WKHVH
            GXPSV  FDQGLGDWHV FDQ HQKDQFH WKHLU NQRZOHGJH DQG LPSURYH WKHLU FKDQFHV RI VXFFHVV LQ WKH
            FHUWLILFDWLRQ H[DP


            3UDFWLFH 7HVWV  .LOOH[DPV FRP SURYLGHV SUDFWLFH WHVWV WKURXJK WKHLU GHVNWRS 9&( H[DP
            VLPXODWRU DQG RQOLQH WHVW HQJLQH  7KHVH SUDFWLFH WHVWV VLPXODWH WKH UHDO H[DP HQYLURQPHQW DQG
            KHOS FDQGLGDWHV DVVHVV WKHLU UHDGLQHVV IRU WKH DFWXDO H[DP  7KH SUDFWLFH WHVWV FRYHU D ZLGH
            UDQJH RI TXHVWLRQV DQG HQDEOH FDQGLGDWHV WR LGHQWLI\ WKHLU VWUHQJWKV DQG ZHDNQHVVHV

            *XDUDQWHHG 6XFFHVV  .LOOH[DPV FRP RIIHUV D VXFFHVV JXDUDQWHH ZLWK WKHLU H[DP GXPSV  7KH\
            FODLP WKDW E\ XVLQJ WKHLU PDWHULDOV  FDQGLGDWHV ZLOO SDVV WKHLU H[DPV RQ WKH ILUVW DWWHPSW RU WKH\
            ZLOO UHIXQG WKH SXUFKDVH SULFH  7KLV JXDUDQWHH SURYLGHV DVVXUDQFH DQG FRQILGHQFH WR LQGLYLGXDOV
            SUHSDULQJ IRU FHUWLILFDWLRQ H[DPV


            8SGDWHG &RQWHQW  .LOOH[DPV FRP UHJXODUO\ XSGDWHV LWV TXHVWLRQ EDQN DQG H[DP GXPSV WR
            HQVXUH WKDW WKH\ DUH FXUUHQW DQG UHIOHFW WKH ODWHVW FKDQJHV LQ WKH H[DP V\OODEXV  7KLV KHOSV
            FDQGLGDWHV VWD\ XS WR GDWH ZLWK WKH H[DP FRQWHQW DQG LQFUHDVHV WKHLU FKDQFHV RI VXFFHVV


            7HFKQLFDO 6XSSRUW  .LOOH[DPV FRP SURYLGHV IUHH   [  WHFKQLFDO VXSSRUW WR DVVLVW FDQGLGDWHV
            ZLWK DQ\ TXHULHV RU LVVXHV WKH\ PD\ HQFRXQWHU ZKLOH XVLQJ WKHLU VHUYLFHV  7KHLU FHUWLILHG H[SHUWV
            DUH DYDLODEOH WR SURYLGH JXLGDQFH DQG KHOS FDQGLGDWHV WKURXJKRXW WKHLU H[DP SUHSDUDWLRQ
            MRXUQH\



                             'PS .PSF FYBNT WJTJU IUUQT   LJMMFYBNT DPN WFOEPST FYBN MJTU
                                .LOO \RXU H[DP DW )LUVW $WWHPSW    *XDUDQWHHG