HP HP0-A100 Online Practice Questions and Exam Preparation

HP HP0-A100 Online Questions & Answers

• Question 11:

  Which appliance provides advanced event correlation, event analysis and investigation, options for remediation and even, storage?

  A. ArcSight Connector Appliance
  B. ArcSight Network Configuration Manager/Threat Response Manager
  C. ArcSight Logger Appliance
  D. ArcSight Express
  C. ArcSight Logger Appliance

• Question 12:

  Which statement describes a CIP?

  A. A collection of packages to interface ArcSight products with ticket management systems
  B. A suite of ArcSight resources focusing on system performance issues
  C. A product that scales easily to manage extreme machine data across IT
  D. A collection of ArcSight resources to monitor IT assets, based on regulatory requirements
  D. A collection of ArcSight resources to monitor IT assets, based on regulatory requirements

• Question 13:

  What does the ArcSight ESM prioritize?

  A. Every event
  B. Correlated events only
  C. Forwarded events only
  D. Every event exclusive of audit and monitor events
  B. Correlated events only

• Question 14:

  Which event schema group describes the Smart Connector that reported the event to the manager?

  A. Root
  B. Agent
  C. Source
  D. Device
  D. Device

• Question 15:

  How many ESM event schema groups are there?

  A. 5
  B. 17
  C. 300
  D. 400
  B. 17

• Question 16:

  The normalization process occurs at which event lifecycle phase?

  A. Reporting and incident analysis
  B. Monitoring and investigation
  C. Priority evaluation and network model lookup
  D. Data collection and event processing
  C. Priority evaluation and network model lookup

• Question 17:

  The ArcSight ESM uses which component to gather events?

  A. Nodes
  B. Smart Connectors
  C. Collectors
  D. Adapters
  B. Smart Connectors

• Question 18:

  What is a reporting enhancement in ArcSight Express release 4.0?

  A. Ability to include more than one chart type in a report
  B. Ability to define non ESM users as recipients, and create a report once and distribute it to multiple recipients
  C. Ability to generate reports of list members
  D. Ability to generate reports of trend data
  B. Ability to define non ESM users as recipients, and create a report once and distribute it to multiple recipients

• Question 19:

  What is the purpose of the ArcSight ESM?

  A. Enables a security bus that allows devices to communicate
  B. Enables situational awareness and visibility of the security risks across an organization
  C. Enables security device management using a common browser-based Management Console
  D. Enables security integration between disparate devices
  B. Enables situational awareness and visibility of the security risks across an organization

• Question 20:

  How are CIPs licensed?

  A. CIPs are included as standard in Logger
  B. CIPs are additional, paid for components.
  C. CIPs are included as standard in Connector Appliance
  D. CIPs are included as standard in ESM
  A. CIPs are included as standard in Logger