050-728 試験問題を無料オンラインアクセス

You have created a custom .csv file to match IP addresses in your network to Department name and point of Contact. Which tools do you need to use in order to include Department Name and point of Contact in your incoming event stream from the Collectors? (Choose 2)

• A.Correlation Engine
• B.Mapping configuration
• C.Event configuration
• D.Event Source Management
• E.Filter Manager

You want to create a correlation rule that looks for 5 events coming from the same machine in 2 minutes. Which option should you choose in the Correlation Wizard to complete the rule?

• A.Simple
• B.Composite
• C.Aggregate
• D.Sequence

Which RuleLG command is an Aggregate rule?

• A.Gate(filter(e.severity=4), filter(e.severity=3 and e.RV67 match regex(NewYork)), all, 60s)
• B.Filter(e.severity=4)
• C.Filter(e.severity=2 and e.rv32 = "FW")
• D.Filter(e.severity>3) flow trigger(30.3.discriminator(e.sip))

Which actions are applicable as an iTRAC step? (Choose 4)

• A.UpdateList Step
• B.Mail Step
• C.Decision step
• D.DropList Step
• E.Batch process Step
• F.Logic Step
• G.Command step
• H.Manual Step

What component is designed to parse and normalize events?

• A.collector
• B.Correlation Engine
• C.iTRAC
• D.Data Access Service (DAS)