HP ArcSight Security Solutions

1.

The normalization process occurs at which event lifecycle phase?

Reporting and incident analysis Monitoring and investigation Priority evaluation and network model lookup Data collection and event processing

2.

Which event lifecycle phase discovers the relationships between events, infers the significance of those relationships, prioritizes them, and provides a framework to take action?

Correlation evaluation Priority evaluation and network model lookup Workflow Data collection and event processing

3.

Which statement describes a CIP?

A collection of packages to interface ArcSight products with ticket management systems A suite of ArcSight resources focusing on system performance issues A product that scales easily to manage extreme machine data across IT A collection of ArcSight resources to monitor IT assets, based on regulatory requirements

4.

What is the output of the Data Collection and Event Processing phase?

Correlation events Base events Filtered events Raw events

5.

Which appliance provides advanced event correlation, event analysis and investigation, options for remediation and even, storage?

ArcSight Connector Appliance ArcSight Network Configuration Manager/Threat Response Manager ArcSight Logger Appliance ArcSight Express

6.

What is the purpose of the ArcSight ESM?

Enables a security bus that allows devices to communicate Enables situational awareness and visibility of the security risks across an organization Enables security device management using a common browser-based Management Console Enables security integration between disparate devices

7.

Which resource used in the Workflow phase in the event lifecycle, .tracks either individual events or multiple related events?

Reports Stages Query viewers Cases

8.

What is the extension used to deliver and install CIPs?

aup cab cip arb

9.

What is the main purpose of using Identity View within an ESM environment?

To correlate identity information maintained by the Identity Management System with events generated m the network To model network architecture within the ESM environment to perform advanced correlation on Asset and User events To extract user and asset information from events in a logger environment to perform correlation analysis on them To forward LDAP and active directory events to ESM Server

10.

What is the most important reason or benefit for customers to use ArcSight ESM?

Events correlation Raw data storage Events aggregation Central management of connectors

HP ArcSight Security Solutions

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Congratulations

COMPANY

Products

OTHERS

Partner

HP ArcSight Security Solutions

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Congratulations

Detail Form

COMPANY

Products

OTHERS

Partner