Free RSA NetWitness Logs & Network Administrator Exam 050-11-CARSANWLN01 Exam Practice Test

Which storage options are available for Archiver storage?

• DAC, SAN. and NAS
• NAS and SAN
• DAS and NAS
• JBOD and DAS

Where do you define dynamic charts for real-time display in Dashboards?

• Default Dashboard
• MONITOR > Reports > Manage > Charts
• MONITOR > Reports > Charts > View
• CONFIGURE > ESA Rules

To create meta keys that will appear in the Investigation view, you would most commonly edit configuration files on the

• Packet Decoder
• Concentrator
• Broker
• Log Decoder

To add an action to the right-click menu in the Investigation Ul. create a

• Right-click action
• Profile
• Context Hub List
• Context Menu Action

The accuracy of Automated Threat Detection is enhanced by configuring

• Who is Lookup Service
• Incident Rules
• ESA Analytics Mappings
• Context Hub

The types of feeds that you can add to RSA NetWitness are:

• Public feed, private feed
• Custom feed. Live feed
• Identity feed, resource feed
• Custom feed, identity feed

What is the definition of an RSA NetWitness ad hoc feed?

• A feed that is deployed one time on one or more Decoders
• A feed that is deployed once on three or more Decoders
• A feed that is deployed on no more than three Decoders once
• A feed that is deployed on one or more Decoders at least three times

When NetWitness receives a log from an event source that does not currently exist in the Admin. Event Sources list, what does it do?

• Writes the log to the Archiver but not the Decoder
• Parses the log to the Decoder, but in transient mode only
• Adds the new Event Source to the existing list of Event Sources
• Ignores the log altogether

The RSA NetWitness Reporting Engine provides visibility into captured data via which of the following mechanisms?

• static and/or dynamic analysis
• alerts, reports and charts
• community and/or sandbox analysis
• ad hoc, schedules, and/or auto-run features

Which of the following are valid sources for the Context Hub? (Choose two)

• RSA Endpoint
• Respond Server
• Health and Wellness module
• Web Threat Detection
• Reporting Engine