HP HP0-A100 Online Practice Questions and Exam Preparation

HP HP0-A100 Online Questions & Answers

• Question 31:

  How does the ArcSight ESM Manager display statistical views of the data on your network?

  A. Active channels
  B. Rules
  C. Cases
  D. Dashboards
  B. Rules

• Question 32:

  What are three resources used in the Correlation phase of the event lifecycle?

  A. Rules, active channels, trends
  B. Dashboards, queries, filters
  C. Query viewers, active channels, data monitors
  D. Filters, rules, data monitors
  D. Filters, rules, data monitors

• Question 33:

  The ArcSight ESM collects, normalizes, aggregates, and filters millions of what?

  A. Intrusions
  B. Transactions
  C. Packets
  D. Log events
  D. Log events

• Question 34:

  What is the output of the Data Collection and Event Processing phase?

  A. Correlation events
  B. Base events
  C. Filtered events
  D. Raw events
  A. Correlation events

• Question 35:

  Which task is performed by the manager during the Priority Evaluation and Network Model Lookup phase?

  A. Batching
  B. Parsing
  C. Asset model lookup
  D. Raw events processing
  D. Raw events processing

• Question 36:

  What is CIP an acronym for?

  A. Collector Intrusion Package
  B. Compliance Insight Package
  C. Correlation Incursion Package
  D. Component Instruction Package
  B. Compliance Insight Package

• Question 37:

  ArcSight IdentityView is utilized by which product?

  A. ArcSight Connectors
  B. ArcSight Logger
  C. ArcSight Connector Appliance
  D. ArcSight ESM
  A. ArcSight Connectors

• Question 38:

  How does a CIP help an organization? (Select two.)

  A. Reduces deployment times of ArcSight components in the organization
  B. Contributes to establishing a strong IT governance program and reducing costs
  C. Shares, uploads, or downloads connectors within your Arc Sight community
  D. Helps to meet regulatory compliance requirements
  E. Helps to define high availability scenarios for ArcSight components
  B. Contributes to establishing a strong IT governance program and reducing costs
  D. Helps to meet regulatory compliance requirements

• Question 39:

  What is ArcSight Express?

  A. An appliance that builds and maintains a detailed understanding of your network's topology, enabling you to centrally manage your infrastructure
  B. An appliance used for long term log data retention and forensics, with very high through put
  C. An appliance to host and "linage multiple Smart Connectors in a single device
  D. An appliance combining ESM functionality with an easy-to-deploy security monitoring and response system
  C. An appliance to host and "linage multiple Smart Connectors in a single device

• Question 40:

  Which ESM component does the Event Priority Evaluation and Asset Model look up?

  A. ESM console
  B. CORR engine
  C. Smart Connectors
  D. ESM manager
  C. Smart Connectors