050-SEPROSIEM-01 · Question #26
The Collector service
The correct answer is D. interprets all incoming event data to discover new devices not currently being monitored and. The Collector service in RSA enVision interprets incoming event data to identify and discover new devices not yet being monitored.
Question
The Collector service
Options
- Astores the log information in its raw format.
- Bretrieves data according to requests and requirements for event viewing, reporting, queries,
- Cprovides support for the Task Triage incident management and the Vulnerability and
- Dinterprets all incoming event data to discover new devices not currently being monitored and
How the community answered
(49 responses)- A6% (3)
- B2% (1)
- C10% (5)
- D82% (40)
Why each option
The Collector service in RSA enVision interprets incoming event data to identify and discover new devices not yet being monitored.
Storing log information in raw format is a function of the database or archiving component in RSA enVision, not the Collector service.
Retrieving data for event viewing, reporting, and queries is the responsibility of the Query or Reporting service, not the Collector.
Supporting Task Triage incident management and Vulnerability functions belongs to dedicated incident management modules, not the Collector service.
The Collector service is responsible for interpreting all incoming event data, including performing auto-discovery of new devices not currently being monitored. This function allows RSA enVision to identify previously unknown log sources and prompt administrators to decide whether to bring them under active monitoring.
Concept tested: RSA enVision Collector service auto-discovery function
Source: https://community.rsa.com/t5/rsa-envision/ct-p/rsa-envision
Topics
Community Discussion
No community discussion yet for this question.