Skip to main content

HP0-A100 Real Exam Questions

HP ArcSight Security Solutions

60 questions available · Page 1 of 6

Updated Exam DumpsVerified AnswersPass Guarantee

Get Complete Exam Dumps
Question 1 Single choice

How are CIPs licensed?

  1. A

    CIPs are included as standard in Logger

  2. B

    CIPs are additional, paid for components.

  3. C

    CIPs are included as standard in Connector Appliance

  4. D

    CIPs are included as standard in ESM

Show answer and explanation

Correct answer: A

Question 2 Single choice

How does the ArcSight ESM Manager display statistical views of the data on your network?

  1. A

    Active channels

  2. B

    Rules

  3. C

    Cases

  4. D

    Dashboards

Show answer and explanation

Correct answer: B

Question 3 Single choice

The ArcSight ESM collects, normalizes, aggregates, and filters millions of what?

  1. A

    Intrusions

  2. B

    Transactions

  3. C

    Packets

  4. D

    Log events

Show answer and explanation

Correct answer: D

Question 4 Single choice

What is ArcSight Express?

  1. A

    An appliance that builds and maintains a detailed understanding of your network's topology, enabling you to centrally manage your infrastructure

  2. B

    An appliance used for long term log data retention and forensics, with very high through put

  3. C

    An appliance to host and "linage multiple Smart Connectors in a single device

  4. D

    An appliance combining ESM functionality with an easy-to-deploy security monitoring and response system

Show answer and explanation

Correct answer: C

Question 5 Single choice

In which phase are functions from the ESM Console (such as NS lookup, Ping, Port info, Trace route and who is) performed?

  1. A

    Workflow

  2. B

    Analysis

  3. C

    Trending

  4. D

    Correlation

Show answer and explanation

Correct answer: B

Question 6 Single choice

What is the name of the process that parses raw events and stores them into the corresponding data fields in the ESM event schema?

  1. A

    Batching

  2. B

    Aggregation

  3. C

    Normalization

  4. D

    Filtering

Show answer and explanation

Correct answer: C

Question 7 Single choice

What is an ArcSight Logger architecture component?

  1. A

    Oracle Database

  2. B

    Receivers

  3. C

    Pattern Discovery

  4. D

    Correlation Engine

Show answer and explanation

Correct answer: D

Question 8 Single choice

ArcSight IdentityView is utilized by which product?

  1. A

    ArcSight Connectors

  2. B

    ArcSight Logger

  3. C

    ArcSight Connector Appliance

  4. D

    ArcSight ESM

Show answer and explanation

Correct answer: A

Question 9 Single choice

What is a reporting enhancement in ArcSight Express release 4.0?

  1. A

    Ability to include more than one chart type in a report

  2. B

    Ability to define non ESM users as recipients, and create a report once and distribute it to multiple recipients

  3. C

    Ability to generate reports of list members

  4. D

    Ability to generate reports of trend data

Show answer and explanation

Correct answer: B

Question 10 Single choice

In which ESM event schema group can the Priority field with a value from 0 to 10 (calculated using ArcSight proprietary Threat Level Formula) be found?

  1. A

    Flex

  2. B

    Threat

  3. C

    Attacker

  4. D

    Root

Show answer and explanation

Correct answer: B