050-SEPROSIEM-01 · Question #75
Events can be collected using which of the following services?
The correct answer is D. Syslog, SNMP, File Reader, ODBC, Agentless Windows, SDEE, LEA and VMware Collector. RSA enVision supports a broad set of collection services, and the complete list includes Syslog, SNMP, File Reader, ODBC, Agentless Windows, SDEE, LEA, and VMware Collector.
Question
Events can be collected using which of the following services?
Options
- ASyslog and Agentless Windows
- BSyslog, SNMP, File Reader, and ODBC
- CSyslog, SNMP, File Reader, ODBC, and Agentless Windows
- DSyslog, SNMP, File Reader, ODBC, Agentless Windows, SDEE, LEA and VMware Collector
How the community answered
(24 responses)- A4% (1)
- B13% (3)
- C8% (2)
- D75% (18)
Why each option
RSA enVision supports a broad set of collection services, and the complete list includes Syslog, SNMP, File Reader, ODBC, Agentless Windows, SDEE, LEA, and VMware Collector.
This option is incomplete - it omits SNMP, File Reader, ODBC, SDEE, LEA, and VMware Collector, which are all valid collection services.
This option is incomplete - it omits Agentless Windows, SDEE, LEA, and VMware Collector.
This option is incomplete - it omits SDEE, LEA, and VMware Collector, which are supported collection services in RSA enVision.
RSA enVision's event collection architecture supports the full range of collection services: Syslog (network devices), SNMP traps, File Reader (flat file logs), ODBC (database logs), Agentless Windows (WMI-based Windows event collection), SDEE (Cisco IDS events), LEA (Check Point Log Export API), and VMware Collector. This comprehensive list covers all supported ingestion paths.
Concept tested: RSA enVision supported event collection services
Topics
Community Discussion
No community discussion yet for this question.