HP0-M54 무료 덤프문제 온라인 액세스

Which tools are used to view events in ArcSight ESM? (Select two.)

• A.Annotations
• B.Dashboard
• C.Active Channel
• D.Knowledge Base article

What can you use to change the stage of a Case?

• A.Query Viewer
• B.Common Conditions Editor
• C.Event annotations
• D.Case Editor

Which statements are true about event lifecycle data collection and the event processing phase?
(Select two.)

• A.Each line of incoming log data is processed as a separate event.
• B.Values are normalized and entered into the ArcSight Event Schema.
• C.Model confidence is determined, based on details provided by the event source.
• D.Event severity is determined, based on an Active List of recent severity factors.

How do asset categorization and event categorization relate to each other?

• A.Asset categorization requires custom FlexConnectors; event categorization uses standard SmartConnectors.
• B.Asset categorization and event categorization are the same.
• C.Asset categorization is the fingerprint of an asset; event categorization is a set of criteria that describes an event.
• D.Asset categorization and event categorization use the same field set to apply categories to assets and events.

When using the Query Editor, three sub-tabs provide the options you need to properly set up the query. What information do these sub-tabs require?

• A.when the query should be run; which format the query output should take; how many data elements should be included
• B.when the query should be run; what the query should be called; how long the data should be archived
• C.which data fields to select; how the data should be displayed; how long the data should be archived
• D.which data fields to select; how the data should be ordered; how the data should be grouped