Free RSA NetWitness Logs & Network Administrator Exam 050-11-CARSANWLN01 Exam Practice Test

Which CLI command would have the effect of starting the Ul Web Server in NetWitness 11?

• start —s nwappliance
• systemctl start saserver service
• systemctl start jetty service
• systemctl start -s saserver

The Context Hub runs as a service on which Host?

• Decoder
• Concentrator
• ESA
• Server

What types of data can the Archiver store?

• Raw Log only
• Raw Log and Log Meta
• Raw Log, Log Meta. Packet Meta
• Raw Log. Log Meta. Raw Packet. Packet Meta

To automate incident creation of alerts in the Respond interface, create

• ESA Rules
• Respond Rules
• Incident Rules
• Reporting Rules

What of the following components can be used to set up external authentication for RSA NetWitness?

• AAoP
• Broker
• Spectrum
• PAM

Which RSA NetWitness host provides the web server for reporting investigation, administration, and other aspects of the user interface?

• NetWitness Server
• Concentrator
• Decoder
• Broker

To customize your query display in Events View, create

• Custom Meta Groups
• Custom Column Groups
• Profiles
• Dashlets

In RSA Live, what is the deploy package option most commonly used for?

• Deploying content to the context hub
• Deploying a resource bundle
• Subscribing to a resource
• Deploying content to air gapped networks

To enable reporting alerts to be sent to the Respond interface, you would

• set up an output action in the Report Engine configuration
• change the capture interface in Reporting sources
• configure forwarding of alerts in the Reporting Engine configuration
• set up an output action in a Report

Which of the following statements best defines an RSA NetWitness application rule?

• The rule filters, truncates, keeps or otherwise flags data analyzed by RSA NetWitness
• The rule is used primarily to distribute content among RSA NetWitness appliances
• The rule uses external intelligence based on IP addresses or domains to add contextual content to network traffic
• The rule is an open programming language for customizing logic into the RSA NetWitness processing engine to identify new protocols or extract data to be indexed