HP0-A116 Exam Questions

ESM components fail to consistently restart after a system reboot and require individual intervention with repeated arcsight_services component restart commands. Which log file off...

Of the 17 event field groups defined in the ArcSight Event Schema, in which group can data fields describing an event's importance as assessed by ArcSight ESM be found?

How do asset categorization and event categorization relate to each other?

In ESM, what allows contextual information to be added to an individual event or group of events in support of workflow or operational metrics?

The Packages view in the ArcSight Console Navigator provides access to all discrete resources that are part of a package in a single view. The dependency view toggle in the Package...

What is an example of an event-based Data Monitor?

What stores information about logons, user actions, and the resulting events in the most concise way?

What are functions of Query-Viewers? (Select two.)

Which type of event is displayed in an Active Channel with the following Inline Filter applied? Category Behavior = /Authentication/Verify Category Outcome = /Failure

What is the default port used when connecting to the ArcSight Web interface?

What is a good way for an operator or analyst to quickly determine which events must be addressed first?

What are valid actions for a rule to take? (Select two.)

What are capabilities of the ArcSight Manager? (Select two.)

What is a bundle?

Which user role is responsible for building content within ESM?

When specifying the attributes of a new Active List, you can set TTL days, hours, and minutes. What is TTL?

What do you use to establish identity, ownership, and criticality of the assets you have installed on your network?

What do the start and end times associated with a notification destination indicate?

Preserve Raw Events, Turbo Mode, and Limit Event Processing Rate are all examples of which type of Connector options?

Which process uncovers the relationship between events, infers the significance of those relationships, prioritizes them, and then provides a framework for taking action?

Which file types MUST be included in an Oracle backup? (Select two.)

Which statements are true about escalation levels? (Select two.)

Under which circumstances does a Connector use its cache? (Select two.)

What must be done first to restore the database from an online backup?

Which components does a Network Model include? (Select two.)

Which statement is true about SmartConnectors and FlexConnectors?

Which host user should own the .tararchive from which the ArcSight ESM Suite bin file containing ESM components, and installation and configuration wizards is extracted?

Which statements are true about user groups? (Select two.)

Which procedure allows you to terminate a session within a Session List? (Select two)

Which statements are true about assets? (Select two.)

Which resources can be displayed in the ArcSight Web interface? (Select two.)

When exporting search results, what does the "Save to ArcSight Command Center" option do?

With regard to SmartConnectors, what is roll back?

What can you use to change the stage of a Case?

Which resource defines what a report will look like when generated?

If a username and password are used for authenticating a remote peer, when would you need to use those credentials a second time?

Where are the resource settings located that determine ArcSight ESM User Password Policy?

Which output formats are available when running a report? (Select two.)

Which resources are optional ArcSight compliance solutions delivered as packages? (Select two.)

When configuring the ArcSight Database, what is the result of setting the offline archive period (Days) to Zero?

Which command is used to add a secondary destination to a Connector's configuration?

What are the three types of Data Monitors?

In network modeling, which resource is used by MSSP or by users with different cost centers?

Which command is used to check the status of the TNS Listener?

What do the start and end times associated with a notification destination indicate?

Which statement is true about inline filters?

There are 17 event field groups defined in the ArcSight Event Schema. In which group would you look for data fields describing an event's importance as assessed by ArcSight ESM?

Which statements are true about Session Lists? (Select two)

When using the Query Editor, three sub-tabs provide the options you need to properly set up the query. What information do these sub-tabs require?

What is the effect of the constraints used in an event search query?