nerdexam
RSA

050-SEPROSIEM-01 · Question #75

Events can be collected using which of the following services?

The correct answer is D. Syslog, SNMP, File Reader, ODBC, Agentless Windows, SDEE, LEA and VMware Collector. RSA enVision supports a broad set of collection services, and the complete list includes Syslog, SNMP, File Reader, ODBC, Agentless Windows, SDEE, LEA, and VMware Collector.

Data Collection, Parsing, and Enrichment

Question

Events can be collected using which of the following services?

Options

  • ASyslog and Agentless Windows
  • BSyslog, SNMP, File Reader, and ODBC
  • CSyslog, SNMP, File Reader, ODBC, and Agentless Windows
  • DSyslog, SNMP, File Reader, ODBC, Agentless Windows, SDEE, LEA and VMware Collector

How the community answered

(24 responses)
  • A
    4% (1)
  • B
    13% (3)
  • C
    8% (2)
  • D
    75% (18)

Why each option

RSA enVision supports a broad set of collection services, and the complete list includes Syslog, SNMP, File Reader, ODBC, Agentless Windows, SDEE, LEA, and VMware Collector.

ASyslog and Agentless Windows

This option is incomplete - it omits SNMP, File Reader, ODBC, SDEE, LEA, and VMware Collector, which are all valid collection services.

BSyslog, SNMP, File Reader, and ODBC

This option is incomplete - it omits Agentless Windows, SDEE, LEA, and VMware Collector.

CSyslog, SNMP, File Reader, ODBC, and Agentless Windows

This option is incomplete - it omits SDEE, LEA, and VMware Collector, which are supported collection services in RSA enVision.

DSyslog, SNMP, File Reader, ODBC, Agentless Windows, SDEE, LEA and VMware CollectorCorrect

RSA enVision's event collection architecture supports the full range of collection services: Syslog (network devices), SNMP traps, File Reader (flat file logs), ODBC (database logs), Agentless Windows (WMI-based Windows event collection), SDEE (Cisco IDS events), LEA (Check Point Log Export API), and VMware Collector. This comprehensive list covers all supported ingestion paths.

Concept tested: RSA enVision supported event collection services

Topics

#event collection#Syslog#SNMP#collection services

Community Discussion

No community discussion yet for this question.

Full 050-SEPROSIEM-01 Practice