050-11-CARSANWLN01 試験問題を無料オンラインアクセス

To customize your query display in Events View, create

• A.Profiles
• B.Custom Meta Groups
• C.Dashlets
• D.Custom Column Groups

To prevent a Meta key from being indexed on a core service, you can

• A.add the value /eve/= indexNone to the key in the custom index file
• B.add the value valueMax= ''000000'' to the key in the custom index file
• C.remove the Meta key from the Manage Default Meta Keys interface
• D.disable the parser for the Meta key in the device configuration

Logging in to NetWitness via RAM requires which of the following to succeed'?

• A.PAM User Authentication
• B.PAM User Authentication and Group Mapping
• C.Kerberos Authentication
• D.NSS Group Authentication

RSA NetWitness services implement what type of access control?

• A.Role-based
• B.Digital Certificate-based
• C.Discretionary Access Control (DAC)
• D.Access Control List (ACL)

Which step happens first in the RSA NetWitness data flow on the Packet Decoder when the capture interface is set to packet_mmap_"?

• A.Application rules evaluated
• B.Network rules evaluated
• C.Berkeley Packet Filter evaluated
• D.Feeds evaluated