HP HP0-A100 Online Practice Questions and Exam Preparation

HP HP0-A100 Online Questions & Answers

• Question 21:

  What is the main purpose of the ArcSight ESM Query Viewer resource?

  A. To view both SQL queries and reports in a dashboard
  B. To view quick, high-level summaries of security events
  C. To get low-level detailed event activities
  D. To view and edit the underlying SOL queries
  B. To view quick, high-level summaries of security events

• Question 22:

  What is an example of a CIP package used for compliance?

  A. DOD
  B. NSA
  C. PCI
  D. MOD
  C. PCI

• Question 23:

  What is the name of the process that parses raw events and stores them into the corresponding data fields in the ESM event schema?

  A. Batching
  B. Aggregation
  C. Normalization
  D. Filtering
  C. Normalization

• Question 24:

  What is the extension used to deliver and install CIPs?

  A. aup
  B. cab
  C. cip
  D. arb
  A. aup

• Question 25:

  Which security product features are offered in ArcSight Express? (Select two)

  A. SRL authentication support
  B. Connector management
  C. First I tool Wizard
  D. Support for FIPS
  E. Connector appliance functionality
  B. Connector management
  D. Support for FIPS

• Question 26:

  Which HP Enterprise Security Product analyzes and correlates every event that occurs across the organization to deliver accurate prioritization of security risks and compliance violations?

  A. Smart Connector
  B. Connector Appliance
  C. Logger
  D. Enterprise Security Manager
  D. Enterprise Security Manager

• Question 27:

  What is the main purpose of using Identity View within an ESM environment?

  A. To correlate identity information maintained by the Identity Management System with events generated m the network
  B. To model network architecture within the ESM environment to perform advanced correlation on Asset and User events
  C. To extract user and asset information from events in a logger environment to perform correlation analysis on them
  D. To forward LDAP and active directory events to ESM Server
  B. To model network architecture within the ESM environment to perform advanced correlation on Asset and User events

• Question 28:

  Which schema group contains the timestamp of the event and name of the event?

  A. Source Event Schema
  B. Category Event Schema
  C. Agent Event Schema
  D. Root Event Schema
  A. Source Event Schema

• Question 29:

  What is the major benefit of using ArcSight Connector Appliance?

  A. Ability to detect common patterns on your network
  B. Ability to configure, monitors, tune, and update Smart Connectors
  C. Ability to perform correlation on raw data
  D. Long-term storage of data
  C. Ability to perform correlation on raw data

• Question 30:

  What is the primary feature of Connector Appliance?

  A. Aggregates events to reduce the quantity sent to the manager
  B. Long-term storage of data
  C. Used to develop the Network Model
  D. Supports bulk operations on all Smart Connectors
  D. Supports bulk operations on all Smart Connectors