RSA 050-11-CARSANWLN01 Practice Questions| TestInsights

Question 1

The Reporting Engine is located on which device?

ADecoder

BConcentrator

CESA

DNetWitness Server

Correct : D

Options Selected by Other Users:

Mark Question:

Start a Discussions

Submit Your Answer:

ADecoder

BConcentrator

CESA

DNetWitness Server

Question 2

Which of the following actions can a Network Rule NOT perform?

AFilter

BTruncate

CAlert

DForward

Correct : D

Options Selected by Other Users:

Mark Question:

Start a Discussions

Submit Your Answer:

AFilter

BTruncate

CAlert

DForward

Question 3

Which of the following statements best defines an RSA NetWitness application rule?

AThe rule filters, truncates, keeps or otherwise flags data analyzed by RSA NetWitness

BThe rule is used primarily to distribute content among RSA NetWitness appliances

CThe rule uses external intelligence based on IP addresses or domains to add contextual content to network traffic

DThe rule is an open programming language for customizing logic into the RSA NetWitness processing engine to identify new protocols or extract data to be indexed

Correct : A

Options Selected by Other Users:

Mark Question:

Start a Discussions

Submit Your Answer:

AThe rule filters, truncates, keeps or otherwise flags data analyzed by RSA NetWitness

BThe rule is used primarily to distribute content among RSA NetWitness appliances

CThe rule uses external intelligence based on IP addresses or domains to add contextual content to network traffic

DThe rule is an open programming language for customizing logic into the RSA NetWitness processing engine to identify new protocols or extract data to be indexed

Question 4

Which of the following rule types relies on two or more events occurring within a specified window of time?

ANetwork Rule

BApplication Rule

CCorrelation Rule

DBPF Filter Rule

Correct : C

Options Selected by Other Users:

Mark Question:

Start a Discussions

Submit Your Answer:

ANetwork Rule

BApplication Rule

CCorrelation Rule

DBPF Filter Rule

Question 5

What are the pre-configured roles in RSA NetWitness?

AEVENT_ANALYST, INTRUSION_ANALYST SOC-MANAGER, ADMIN, OPERATOR, RESPOND_ADMINlSTRATOR

BEVENT_STREAM_ANALYST WAREHOUSE_ANALYST, ARCHIVER_ANALYST, DB_ANALYST ADMINISTRATOR

CMALWARE_ANALYST, ESA_ANALYST, REPORT_ANALYST ADMINISTRATOR

DADMINISTRATORS, OPERATORS, ANALYSTS SOC_MANAGERS, MALWARE_ANALYSTS, DATA_PRIVACY_OFFICERS, RESPOND ADMINISTRATOR

Correct : D

Options Selected by Other Users:

Mark Question:

Start a Discussions

Submit Your Answer:

AEVENT_ANALYST, INTRUSION_ANALYST SOC-MANAGER, ADMIN, OPERATOR, RESPOND_ADMINlSTRATOR

BEVENT_STREAM_ANALYST WAREHOUSE_ANALYST, ARCHIVER_ANALYST, DB_ANALYST ADMINISTRATOR

CMALWARE_ANALYST, ESA_ANALYST, REPORT_ANALYST ADMINISTRATOR

DADMINISTRATORS, OPERATORS, ANALYSTS SOC_MANAGERS, MALWARE_ANALYSTS, DATA_PRIVACY_OFFICERS, RESPOND ADMINISTRATOR

Curious about Actual RSA Certified Administrator (050-11-CARSANWLN01) Exam Questions?

Options Selected by Other Users:

Options Selected by Other Users:

Options Selected by Other Users:

Options Selected by Other Users:

Options Selected by Other Users: