RSA 050-11-CARSANWLN01 Quiz 3 Topic 3 Questions 11-15

Question: 1

What happens when you set the metadata associated with a parser to Transients

ATransient means the Decoder is using the parser to parse traffic, and the generated metadata is not stored on disk

BTransient means the Decoder is using the parser to parse traffic, and the generated metadata is retained on disk for 24 hours

CTransient means the Decoder is using the parser only to filter out data, not to generate metadata

DTransient means the Decoder is using the parser only for ESA

Show Answer

Question: 2

If you choose "Stop Rule Processing" in your Application Rule definition, which of the following are action choices'? (Choose three)

AKeep

BFilter

CTruncate

DIndex

ETransient

FRemove

Show Answer

Question: 3

Service Groups are used primarily for

Agrouping metadata from specified hosts

Bdeploying Live resources to specified services

Cgrouping hosts for batch configuration

Dgrouping hosts for monitoring performance in the Health and Wellness view

Show Answer

Question: 4

Which of the following is the basic building block of a report in RSA NetWitness?

ARule

BBroker

CPacket

DSession

Show Answer

Question: 5

Where do you define dynamic charts for real-time display in Dashboards'?

ADefault Dashboard

BMONITOR > Reports > Manage > Charts

CMONITOR > Reports > Charts > View

DCONFIGURE > ESA Rules

Show Answer

RSA 050-11-CARSANWLN01 Quiz:3 Topic:3 Questions:11-15