Free HP0-A100 Exam Dumps Preview

Question 1

Single choice

Which statement is correct?

1. A

   Smart Connectors cannot execute commands.

2. B

   Smart Connect or installers are operating system independent

3. C

   Smart Connectors use the Event Category Model to describe normalized events

4. D

   Smart Connectors correlate events from raw data.

Reveal answer details Close answer details

Correct answerC

Question 2

Single choice

Which type of ESM resources is able to create correlation events?

1. A

   Rules and correlation data monitors

2. B

   Reports

3. C

   Trend tables

4. D

   Active and session lists

Reveal answer details Close answer details

Correct answerB

Question 3

Single choice

Which function is performed by the ArcSight ESM Manager?

1. A

   Aggregates events

2. B

   Normalizes event data into CEF fields

3. C

   Receives raw events from devices spread throughout the network

4. D

   Prioritizes events

Reveal answer details Close answer details

Correct answerB

Question 4

Single choice

Which task is performed by the manager during the Priority Evaluation and Network Model Lookup phase?

1. A

   Batching

2. B

   Parsing

3. C

   Asset model lookup

4. D

   Raw events processing

Reveal answer details Close answer details

Correct answerD

Question 5

Single choice

What is the purpose of the ArcSight ESM?

1. A

   Enables a security bus that allows devices to communicate

2. B

   Enables situational awareness and visibility of the security risks across an organization

3. C

   Enables security device management using a common browser-based Management Console

4. D

   Enables security integration between disparate devices

Reveal answer details Close answer details

Correct answerB

Question 6

Single choice

Which ESM component does the Event Priority Evaluation and Asset Model look up?

1. A

   ESM console

2. B

   CORR engine

3. C

   Smart Connectors

4. D

   ESM manager

Reveal answer details Close answer details

Correct answerC

Question 7

Single choice

What is the main purpose of the ArcSight ESM Query Viewer resource?

1. A

   To view both SQL queries and reports in a dashboard

2. B

   To view quick, high-level summaries of security events

3. C

   To get low-level detailed event activities

4. D

   To view and edit the underlying SOL queries

Reveal answer details Close answer details

Correct answerB

Question 8

Single choice

What is CIP an acronym for?

1. A

   Collector Intrusion Package

2. B

   Compliance Insight Package

3. C

   Correlation Incursion Package

4. D

   Component Instruction Package

Reveal answer details Close answer details

Correct answerB

Question 9

Multiple choice

How does a CIP help an organization? (Select two.)

1. A

   Reduces deployment times of ArcSight components in the organization

2. B

   Contributes to establishing a strong IT governance program and reducing costs

3. C

   Shares, uploads, or downloads connectors within your Arc Sight community

4. D

   Helps to meet regulatory compliance requirements

5. E

   Helps to define high availability scenarios for ArcSight components

Reveal answer details Close answer details

Correct answersB, D