Online Access Free HP0-A100 Exam Questions

Which component performs event aggregation?

• A.Smart Connectors
• B.ESM Database
• C.CORR-Engine
• D.ESM Manager

What is the main purpose of the ArcSight ESM Query Viewer resource?

• A.To view both SQL queries and reports in a dashboard
• B.To get low-level detailed event activities
• C.To view quick, high-level summaries of security events
• D.To view and edit the underlying SOL queries

In which phase are functions from the ESM Console (such as NS lookup, Ping, Port info, Trace route and who is) performed?

• A.Analysis
• B.Correlation
• C.Workflow
• D.Trending

What is the main purpose of using Identity View within an ESM environment?

• A.To correlate identity information maintained by the Identity Management System with events generated m the network
• B.To model network architecture within the ESM environment to performadvanced correlation on Asset and User events
• C.To extract user and asset information from events in a logger environment to perform correlation analysis on them
• D.To forward LDAP and active directory events to ESM Server

What is the output of the Data Collection and Event Processing phase?

• A.Base events
• B.Filtered events
• C.Correlation events
• D.Raw events