HP ArcSight ESM 6.5 Security Administrator and Analyst - HP0-A116 FREE EXAM DUMPS QUESTIONS & ANSWERS

A. Creating a vulnerability B. generating a report C. adding a condition to a filter D. executing a command E. sending a notification

A. Paused Connectors are not responding to the Manager. B. Paused Connectors are responding to the Manager and sending events. C. Paused Connectors are responding to the Manager but not sending or caching events. D. Paused Connectors are responding to the Manager but events are being cached.

A. Data Monitors cannot be added to a Dashboard in the ArcSight Web interface. B. Inline filters cannot be used in the ArcSight Web interface. C. Cases cannot be modified in the ArcSight Web interface. D. Reports cannot be formatted in the ArcSight Web interface.

A. Schedule package pushes during normal work hours. B. Schedule frequent automatic package pushes C. Designateonly one Manager as publisher. D. Do not retry on a failed automatic package push.

A. dashboard drilldowns into other dashboards only B. dashboard drilldowns into channels, reports, query viewers, or other dashboards C. query viewer drilldowns into channels, reports, dashboards, or other query viewers D. query viewer drilldowns into other query viewers only

A. Combined views B. Asset views C. Resource views D. Results views E. Simple views

A. Queries and Cases B. Reports and Dashboards C. Notifications and Active Channels D. Search Filters and Saved Searches E. Knowledge Base articles and Templates

A. Asset categorization and event categorization use the same field set to apply categories to assets and events B. Asset categorization requires custom FlexConnectors; event categorization uses standard Smartconnectors. C. Asset categorization is the fingerprint of an asset; event categorization is a set of criteria that describes an event. D. Asset categorization and event categorization are the same.

A. Correlate B. Substring C. Concatenate D. Find

A. during the authentication phase of the SmartConnector Installation B. during installation of the ArcSight Console C. during initial configuration of server-side SSL trust store D. during installation of the ArcSight Manager

A. Update the ESM product license, monitor resources, and investigate events from Dashboards B. Update the ESM product license, and access the ArcSight Web interface. C. Status Connectors, configure authentication; monitor events and resources from Dashboards, and update the ESM product license. D. Configure Connectors, notifications, and authentication; monitor events and resources from Dashboards, and access the ArcSight Web interface.

A. When filters are applied by either the Connector or the Manager, events that match the filter conditions are excluded and are not forwarded for further processing. B. Events that match the Connector filter are excluded and not forwarded further; events that match the Manager filter are selected for further analysis. C. When filters are applied by either the Connector or the Manager, events that match the filter conditions are selected and forwarded for further processing. D. Events that match the Connector filter are included and forwarded to the Manager; events that match the Manager filter are excluded.

A. Assets with a category that matches the zone category are grouped into a "Critical" asset group. B. All assets in the zone inherit the zone's category. C. Nothing happens. Assets in the zone maintain their own individual category identities. D. Assets in the zone inherit the zone's category and are grouped into a "Critical" asset group.