試験番号: 050-V37
試験の名称: CSE RSA enVision Essentials (new update)
RSA-SECURITY育成訓練、認証は開発と管理二つの種類があります、ここで開発だけ紹介いたします。
開発認証試験は全部で三つの試験があります、試験番号310-065テスト、killtest実践試験の問題集050-V37 (CSE RSA enVision Essentials (new update))は最も標準的な技術を正確的に書き入れ、認証した専門家と作者の出版した新製品だけを使います。一発で成功することを保証します。
1.What happens if an event source device type is not immediately recognized by RSA enVision? (Check
the one best answer.)
A.It will be defined as "unknown" and for a limited time enVision will collect event data it generates
B.Data from that device will be discarded until the device type can be defined
C.An alert is generated by default to call an administrator's attention to the device
D.The UDS Service will create a parsing XML file for the device and place data in the NIC Parse Cache
Answer:A
2.When setting up a Check Point firewall device, which of the following is a good practice that should be
completed first? (Check the one best answer.)
A.Stop and restart the Check Point Firewall Service
B.Stop and restart the enVision NIC Collector Service
C.Verify that the Check Point Log Viewer is receiving events
D.Set an 8-character key to establish an authenticated connection
Answer:C
3.How many Remote Collectors (RC) can each Database Server (D-SRV) support? (Check the one best
answer.)
A.Eight (8)
B.Ten (10)
C.Sixteen (16)
D.Thirty two (32)
Answer:C
4.After creating a customized Report Menu system, which RSA enVision service(s) need to be re-started?
A.Only the NIC Webserver Service
B.The NIC Webserver and NIC Server Services
C.The NIC Webserver, NIC Server and NIC Locator Services
D.The NIC Webserver, NIC Server, NIC Locator, and NIC Packager Services
Answer:A
5.When opening a connection in Event Explorer, you can define which of the following features? (Check
the three correct answers.)
A.Devices
B.Event categories
C.Log messages
D.Time frame
E.Local collector
Answer:A B D
6.In the RSA enVision UDS process, what is the purpose of performing Data Reduction steps? (Check the
one best answer.)
A.Improve speed and efficiency of data processing
B.Compress unsupported device data prior to storage
C.Apply ISO-approved abbreviations to message text strings
D.Decrease the rate that unsupported device data is collected
Answer:A
7.If a customer has a specific syslog that they would like to use as part of a demonstration, you can load it
into enVision for reporting and querying using which of the following? (Check the one best answer.
A.The lsdata utility to import the syslog file
B.Copying the syslog file into the IPDB data directory
C.Using the Data Injector utility to collect data from the syslog file
D.Using the Custom Reports ?View External Data function of the administrative GUI
Answer:C
試験の名称: CSE RSA enVision Essentials (new update)
RSA-SECURITY育成訓練、認証は開発と管理二つの種類があります、ここで開発だけ紹介いたします。
開発認証試験は全部で三つの試験があります、試験番号310-065テスト、killtest実践試験の問題集050-V37 (CSE RSA enVision Essentials (new update))は最も標準的な技術を正確的に書き入れ、認証した専門家と作者の出版した新製品だけを使います。一発で成功することを保証します。
1.What happens if an event source device type is not immediately recognized by RSA enVision? (Check
the one best answer.)
A.It will be defined as "unknown" and for a limited time enVision will collect event data it generates
B.Data from that device will be discarded until the device type can be defined
C.An alert is generated by default to call an administrator's attention to the device
D.The UDS Service will create a parsing XML file for the device and place data in the NIC Parse Cache
Answer:A
2.When setting up a Check Point firewall device, which of the following is a good practice that should be
completed first? (Check the one best answer.)
A.Stop and restart the Check Point Firewall Service
B.Stop and restart the enVision NIC Collector Service
C.Verify that the Check Point Log Viewer is receiving events
D.Set an 8-character key to establish an authenticated connection
Answer:C
3.How many Remote Collectors (RC) can each Database Server (D-SRV) support? (Check the one best
answer.)
A.Eight (8)
B.Ten (10)
C.Sixteen (16)
D.Thirty two (32)
Answer:C
4.After creating a customized Report Menu system, which RSA enVision service(s) need to be re-started?
A.Only the NIC Webserver Service
B.The NIC Webserver and NIC Server Services
C.The NIC Webserver, NIC Server and NIC Locator Services
D.The NIC Webserver, NIC Server, NIC Locator, and NIC Packager Services
Answer:A
5.When opening a connection in Event Explorer, you can define which of the following features? (Check
the three correct answers.)
A.Devices
B.Event categories
C.Log messages
D.Time frame
E.Local collector
Answer:A B D
6.In the RSA enVision UDS process, what is the purpose of performing Data Reduction steps? (Check the
one best answer.)
A.Improve speed and efficiency of data processing
B.Compress unsupported device data prior to storage
C.Apply ISO-approved abbreviations to message text strings
D.Decrease the rate that unsupported device data is collected
Answer:A
7.If a customer has a specific syslog that they would like to use as part of a demonstration, you can load it
into enVision for reporting and querying using which of the following? (Check the one best answer.
A.The lsdata utility to import the syslog file
B.Copying the syslog file into the IPDB data directory
C.Using the Data Injector utility to collect data from the syslog file
D.Using the Custom Reports ?View External Data function of the administrative GUI
Answer:C