Novell 050-728 Identity and Security Specialization Novell Sentinel 6.1

1.

Which Sentinel objects can be imported into Sentinel Control Center interface? (Choose 2)

Correlation rules Global filters Active views Solution packs iTRAC Workflow

2.

The Sentinel Correlation Engine Architecture is made up which components? (Choose 2)

DAS Query Active views Input manager Action Manager Solution Pack Controls

3.

Which actions are applicable as an iTRAC step? (Choose 4)

Mail Step Command step Manual Step DropList Step Decision step

4.

What operators can only be used when using the Custom/Freeform option in correlation wizard? (Choose 3)

Sequence() Gate() Filter() IsNull() InList()

5.

What does a red line indicate in the tabular part of an active view?

A severe event occurred A collector error occurred Data was dropped by Sentinel More events were received than could be displayed

6.

Which statement is true regarding roles used by ITRAC?

Users can be made a member of only one role Users can be members of multiple roles at any one time Users can be a member of one member role and many secondary roles When a user is created, a new role is created for that user and the user may then be added to additional role

7.

You create and deploy a correlation rule with a Create incident action that also indicates an iTRAC workflow. After having the rule on for an hour, you find that the system has created several hundred workflow processes. What steps can you take to address this problem? (Choose 2)

Change the iTRAC settings in the configuration xml file Configure the Data retention field in the Sentinel Data Manager Set the maximum incidents setting to 10 in the correlation action definition Adjust the definition of the rule so the threshold for triggering an event is higher Change the Update Criteria todonot perform actionsevery time this rule fires for the next 1 hour

8.

Which Incident field provides a GUI option to configure the items in the drop-down list?

State Priority Severity Category Originator

9.

When using the Correlation rule Wizard, which option would you select to create the RuleLG filter (e.rv32=*FW* and e.Severity = 3)

Simple Sequence Aggregate Composite

10.

What happens when a user accepts a worklist item assigned to an iTRAC role?

The administrator receives an email notification The user's profile information is attached to the incident An assignment is made in the USERS table of the database The worklist item is removed from the worklist for the other users in that role

Novell 050-728 Identity and Security Specialization Novell Sentinel 6.1

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Congratulations

COMPANY

Products

OTHERS

Partner

Novell 050-728 Identity and Security Specialization Novell Sentinel 6.1

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Congratulations

Detail Form

COMPANY

Products

OTHERS

Partner