1.
Which statement about drill down Query Viewers is true?
2.
What Is the ArcSight Event Schema?
3.
Which ArcSight ESM user type provides full privileges to use the Command Center, the ArcSight Console, the Arcsight Web client, and all tools?
4.
Which ArcSight resource objects do Field Sets correspond to?
5.
What is the effect of the constraints used in an event search query?
6.
Besides managing user accounts, user groups, event storage, and notifications, what else does the ArcSight Command Center allow you to do?
7.
You want your Active Channel to automatically display new events as they arrive at ESM. Which time parameter you use to accomplish this?
8.
How do asset categorization and event categorization relate to each other?
9.
Of the 17 event field groups defined in the ArcSight Event Schema, in which group can data fields describing an event's importance as assessed by ArcSight ESM be found?
10.
What is the focus of a Focus report?