500-290 試験問題を無料オンラインアクセス

Which option is not a characteristic of dashboard widgets or Context Explorer?

• A.Context Explorer is a tool used primarily by analysts looking for trends across varying periods of time.
• B.Context Explorer can be added as a widget to a dashboard.
• C.Widgets offer users an at-a-glance view of their environment.
• D.Widgets are offered to all users, whereas Context Explorer is limited to a few roles.

What does the whitelist attribute value "not evaluated" indicate?

• A.The host is not on a monitored network segment.
• B.The whitelist status could not be updated because the correlation policy it belongs to is not enabled.
• C.The host could not be evaluated because no profile exists for it.
• D.The host is not a target of the whitelist.

Which option describes Spero file analysis?

• A.a method of analyzing the entire contents of a file to determine whether it is malicious or not
• B.a method of analyzing a file by executing it in a sandbox environment and observing its behaviors to determine if it is malicious or not
• C.a method of analyzing certain file characteristics, such as metadata and header information, to determine whether a file is malicious or not
• D.a method of analyzing the SHA-256 hash of a file to determine whether a file is malicious or not

When configuring an LDAP authentication object, which server type is available?

• A.Oracle
• B.Yahoo
• C.SMTP
• D.Microsoft Active Directory

Which option is true of the Packet Information portion of the Packet View screen?

• A.displays packet data in a format based on TCP/IP layers
• B.provides a table view of events
• C.shows you the user that triggered the event
• D.allows you to download a PCAP formatted file of the session that triggered the event