RSA 050-11-CARSANWLN01 RSA NetWitness Logs & Network Administrator Exam Exam Practice Test Questions

• Question 1

  Which RSA NetWitness host provides the web server for reporting investigation, administration, and other aspects of the user interface?

  • NetWitness Server
  • Concentrator
  • Decoder
  • Broker

  Show Answer Answer: A Next

• Question 2

  To access device information and perform device operations through RSA NetWitness. a user must be

  • Assigned the role of Operator"
  • A member of a "DeviceUser" group in Active Directory
  • A member of a role that has privileges for the device
  • Assigned read/write access to the NetWitness appliance

  Show Answer Answer: C Next

• Question 3

  Where do you define dynamic charts for real-time display in Dashboards?

  • Default Dashboard
  • MONITOR > Reports > Manage > Charts
  • MONITOR > Reports > Charts > View
  • CONFIGURE > ESA Rules

  Show Answer Answer: B Next

• Question 4

  To automate incident creation of alerts in the Respond interface, create

  • ESA Rules
  • Respond Rules
  • Incident Rules
  • Reporting Rules

  Show Answer Answer: C Next

• Question 5

  Which output actions are available when creating Reporting Engine alerts'?

  • OSX, ODBC, Syslog
  • ODBC, SQL, Syslog, SMTP, URL, NetworkShare
  • SNMP, SMTP, Syslog, SFTP, URL, NetworkShare
  • SNMP, ODBC, Syslog, FTP

  Show Answer Answer: C Next