Weekend Sale 65% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: sale65best

Free RSA 050-11-CARSANWLN01 Practice Exam with Questions & Answers | Set: 2

Questions 11

Which of the following are valid sources for the Context Hub? (Choose two)

Options:
A.

RSA Endpoint

B.

Respond Server

C.

Health and Wellness module

D.

Web Threat Detection

E.

Reporting Engine

RSA 050-11-CARSANWLN01 Premium Access
Questions 12

If you choose "Stop Rule Processing" in your Application Rule definition, which of the following are action choices? (Choose three)

Options:
A.

Keep

B.

Filter

C.

Truncate

D.

Index

E.

Transient

F.

Remove

Questions 13

To prevent a Meta key from being indexed on a core service, you can

Options:
A.

disable the parser for the Meta key in the device configuration

B.

add the value /eve/= indexNone to the key in the custom index file

C.

remove the Meta key from the Manage Default Meta Keys interface

D.

add the value valueMax= ‘’000000’’ to the key in the custom index file

Questions 14

What is the definition of an RSA NetWitness ad hoc feed?

Options:
A.

A feed that is deployed one time on one or more Decoders

B.

A feed that is deployed once on three or more Decoders

C.

A feed that is deployed on no more than three Decoders once

D.

A feed that is deployed on one or more Decoders at least three times

Questions 15

Parsers can be enabled on which of the following?

Options:
A.

Packet Decoder only

B.

Packet Decoder and Log Decoder

C.

Packet Decoder and Log Decoder and Concentrator

D.

Packet Decoder and Log Decoder and Concentrator and Broker

Questions 16

Which of the following choices is defined as being a delineated set of network data units that comprise a transaction from start to finish'?

Options:
A.

Frame

B.

Packet

C.

Session

D.

Token

Questions 17

Where is the PAM configuration file located on an RSA NetWitness appliance'?

Options:
A.

/etc/hosts

B.

/etc/pam.d

C.

/opVbin/pam

D.

/usr/birVconfig

Questions 18

Where do you define dynamic charts for real-time display in Dashboards?

Options:
A.

Default Dashboard

B.

MONITOR > Reports > Manage > Charts

C.

MONITOR > Reports > Charts > View

D.

CONFIGURE > ESA Rules

Questions 19

When NetWitness receives a log from an event source that does not currently exist in the Admin. Event Sources list, what does it do?

Options:
A.

Writes the log to the Archiver but not the Decoder

B.

Parses the log to the Decoder, but in transient mode only

C.

Adds the new Event Source to the existing list of Event Sources

D.

Ignores the log altogether

Questions 20

To use RSA SecurlD as an authentication method for administrators, what must be configured?

Options:
A.

PAM

B.

CHAP

C.

RADIUS

D.

LDAP