HP ArcSight ESM Security Analyst - HP0-M54 FREE EXAM DUMPS QUESTIONS & ANSWERS]

Question 1

Which statement is true about the ArcSight Web interface?

A. Data Monitors cannot be added to a Dashboard in the ArcSight Web interface. B. Inline filters cannot be used in the ArcSight Web interface. C. Cases cannot be modified in the ArcSight Web interface. D. Reports cannot be formatted in the ArcSight Web interface.

Discussion 0

Correct Answer: A Vote an answer

Question 2

Which statement is true about join rules and chained rules?

A. Chained rules result in detailed chains; join rules result in simple chains. B. Chained rules may or may not be join rules that also use Active Lists or rely on Correlation events generated by other rules. C. Join rules use Session Lists; chained rules use Active Lists. D. Join rules link simple rules together; chained rules link join rules.

Discussion 0

Correct Answer: B Vote an answer

Question 3

What is a criteria factor within the ArcSight Priority Formula?

A. Model Confidence B. Assurance C. Seriousness D. Asset Priority

Discussion 0

Correct Answer: A Vote an answer

Question 4

Which user role is responsible for building content within ESM?

A. Operator B. Administrator C. Author D. Analyst

Discussion 0

Correct Answer: C Vote an answer

Question 5

Event correlation, event reconciliation, moving average, session reconciliation, and statistics are all examples of which type of Data Monitors?

A. non-event-based B. correlation C. event-based D. system status

Discussion 0

Correct Answer: B Vote an answer

Question 6

What represents the current status in the investigation of a Case?

A. Annotations B. Cases C. Stages D. Notifications

Discussion 0

Correct Answer: C Vote an answer