HP HP0-A100 Online Practice Questions and Exam Preparation

HP HP0-A100 Online Questions & Answers

• Question 1:

  In the Workflow phase, what are Annotations?

  A. Annotations are a field in the ESM event schema that enables you to flag events far follow up
  B. Annotations are pointers to an internal or external web page where a user can find more information about vulnerable
  C. Annotations are a monitoring tool used by Security Operation Centers
  D. Annotations are an ESM resource to export event data to third-party products, such as BMC Remedy
  C. Annotations are a monitoring tool used by Security Operation Centers

• Question 2:

  What are the features that allow you to use Arc Sight Logger throughout your network?

  A. Logger has pre-packaged content with forensics on-the-fly capability.
  B. Logger allows you to deploy a single solution to manage all log data across your enterprise.
  C. Logger uses a pattern matching and anomaly detection system to find very subtle and sophisticated threats.
  D. Logger has two deployment options with a detached database.
  A. Logger has pre-packaged content with forensics on-the-fly capability.

• Question 3:

  Which type of ESM resources is able to create correlation events?

  A. Rules and correlation data monitors
  B. Reports
  C. Trend tables
  D. Active and session lists
  B. Reports

• Question 4:

  What is the main purpose of the ArcSight ESM?

  A. To archive raw event data
  B. To correlate events and provide real-time threat detection
  C. To centrally manage Smart Connector configuration
  D. To manage multiple retention policies
  B. To correlate events and provide real-time threat detection

• Question 5:

  In which ESM event schema group can the Priority field with a value from 0 to 10 (calculated using ArcSight proprietary Threat Level Formula) be found?

  A. Flex
  B. Threat
  C. Attacker
  D. Root
  B. Threat

• Question 6:

  Which events schema group describes the sensor that sends events the Smart Connector?

  A. Source
  B. Agent
  C. Device
  D. Root
  C. Device

• Question 7:

  What are functions of a Smart Connector? (Select two)

  A. Collecting data from a source device
  B. Parking and normalizing events
  C. Long-term storage repository for events
  D. Performing correlation evaluation
  E. Discovering day-zero attacks
  A. Collecting data from a source device
  B. Parking and normalizing events

• Question 8:

  Which Arc Sight solution delivers Arc Sight content to add specific compliance or standard requirements such as PCI and Sarbanes-Oxley (SOX)?

  A. Compliance Insight Package
  B. Arc Sight Resource Collector
  C. Arc Sight Update Package
  D. Arc Sight Package Bundle
  A. Compliance Insight Package

• Question 9:

  What is the major benefit of ArcSight Logger?

  A. Correlation of raw events
  B. Long-term storage of events
  C. Storage of connectors
  D. Real-time threat detection
  D. Real-time threat detection

• Question 10:

  Which event lifecycle phase discovers the relationships between events, infers the significance of those relationships, prioritizes them, and provides a framework to take action?

  A. Correlation evaluation
  B. Priority evaluation and network model lookup
  C. Workflow
  D. Data collection and event processing
  C. Workflow