050-11-CARSANWLN01無料問題集「RSA NetWitness Logs & Network Administrator」

質問 1

In order to run Reports against data stored on the Archiver you must

（A）restore data from cold storage to any hot storage device

（B）add the Archiver to the Concentrator's list of configured data sources

（C）restore the Archiver data to any Concentrator

（D）add the Archiver to the Reporting Engine's list of configured data sources

質問 2

Which of the following choices is defined as being a delineated set of network data units that comprise a transaction from start to finish'?

（A）Frame

（B）Session

（C）Packet

（D）Token

正解：B 解答を投票する

質問 3

In what order are filters evaluated as data flows through the Decoder?

（A）Network Rules. Feeds. Application Rules. BPF, LUA Parsers

（B）Feeds. Network Rules. LUA Parsers. Application Rules. BPF

（C）Feeds. Network Rules. BPF. Application Rules, LUA Parsers

（D）BPF. Network Rules. LUA Parsers. Feeds. Application Rules

正解：D 解答を投票する

質問 4

If you choose "Stop Rule Processing" in your Application Rule definition, which of the following are action choices? (Choose three)

正解：A、C、D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 5

Which of the following is the basic building block of a report in RSA NetWitness?

（A）Broker

（B）Session

（C）Packet

（D）Rule

正解：D 解答を投票する

質問 6

Which of the following statements about the REST interface are true? (Choose two)

（A）The REST interface for the Decoder service defaults to 50014

（B）The REST interface for the Broker service defaults to 50103

（C）The REST interface is available separately for each core Service on the Host

（D）The REST interface is available only for Concentrators and Decoders

（E）The REST interface for the Concentrator service defaults to 51005

正解：B、C 解答を投票する

質問 7

The types of feeds that you can add to RSA NetWitness are:

（A）Custom feed, identity feed

（B）Public feed, private feed

（C）Custom feed. Live feed

（D）Identity feed, resource feed

正解：A 解答を投票する

050-11-CARSANWLN01 無料問題集「RSA NetWitness Logs & Network Administrator」

弊社を連絡する

関連リンク

トップ試験