050-11-CARSANWLN01 무료 덤프문제 온라인 액세스

Which of the following is a valid data source for Respond Alerts?

• A.Network Rules
• B.Live Feeds
• C.Reporting Engine
• D.Application Rules

In order to run Reports against data stored on the Archiver you must

• A.restore data from cold storage to any hot storage device
• B.add the Archiver to the Reporting Engine's list of configured data sources
• C.add the Archiver to the Concentrator's list of configured data sources
• D.restore the Archiver data to any Concentrator

Parsers can be enabled on which of the following?

• A.Packet Decoder only
• B.Packet Decoder and Log Decoder
• C.Packet Decoder and Log Decoder and Concentrator
• D.Packet Decoder and Log Decoder and Concentrator and Broker

In RSA NetWitness. viewing text or image data associated with a session is accessed through a

• A.packet level drill
• B.session reconstruction view
• C.decoder analysis view
• D.meta value view

To create meta keys that will appear in the Investigation view, you would most commonly edit configuration files on the

• A.Packet Decoder
• B.Broker
• C.Concentrator
• D.Log Decoder