HP HP0-A100 - HP ArcSight Security Solutions Exam
Page: 3 / 12
Total 60 questions
Question #11 (Topic: )
What is the major benefit of using ArcSight Connector Appliance?
A. Ability to detect common patterns on your network
B. Ability to configure,monitors,tune, and update SmartConnectors
C. Ability to perform correlation on raw data
D. Long-term storage of data
Answer: C
Question #12 (Topic: )
In which phase are functions from the ESM Console (such as NS lookup, Ping, Port
info,Trace routeand who is) performed?
info,Trace routeand who is) performed?
A. Workflow
B. Analysis
C. Trending
D. Correlation
Answer: B
Question #13 (Topic: )
In the Workflow phase, what are Annotations?
A. Annotationsare a field inthe ESM event schema that enables you to flag events far followup
B. Annotations are pointers to an internal or external web page where a user can find more information about vulnerable
C. Annotations are a monitoring tool used by Security Operation Centers
D. Annotations are an ESM resource to export event data to third-party products, such as BMC Remedy
Answer: C
Question #14 (Topic: )
Which task is performed by the manager during the Priority Evaluation and Network Model
Lookup phase?
Lookup phase?
A. Batching
B. Parsing
C. Asset model lookup
D. Raw events processing
Answer: D
Question #15 (Topic: )
What is the purpose of the ArcSight ESM?
A. Enables a security bus that allows devices to communicate
B. Enables situational awarenessand visibility of the security risks across an organization
C. Enables security device management using a common browser-based Management Console
D. Enables security integration between disparate devices
Answer: B
