HP
HP0-A100 · Question #53
What are three resources used in the Correlation phase of the event lifecycle?
The correct answer is D. Filters, rules,data monitors. siem/arcsight/aesa-esm-security-analyst (See the Learning Objectives Point #04).
Developing and Managing Correlation Rules and Filters
Question
What are three resources used in the Correlation phase of the event lifecycle?
Options
- ARules, active channels, trends
- BDashboards, queries, filters
- CQuery viewers, active channels, data monitors
- DFilters, rules,data monitors
How the community answered
(30 responses)- A7% (2)
- B7% (2)
- C17% (5)
- D70% (21)
Explanation
siem/arcsight/aesa-esm-security-analyst (See the Learning Objectives Point #04).
Topics
#correlation phase#rules#filters#data monitors
Community Discussion
No community discussion yet for this question.