What is the name of the process that parses raw events and stores them into the corresponding data fields in the ESM event schema? A. Batching B. Aggregation C. Normalization D. Filtering

How are CIPs licensed? A. CIPs are included as standard in Logger B. CIPs are additional, paid for components. C. CIPs are included as standard in Connector Appliance D. CIPs are included as standard in ESM

What is IAM an acronym for? A. Intrusion and Access Management B. Identity and Access Management C. Incident Account Management D. Identity Account Management

Which function is performed by the ArcSight ESM Manager? A. Aggregates events B. Normalizes event data into CEF fields C. Receives raw events from devices spread throughout the network D. Prioritizes events

Which events schema group describes the sensor that sends events the Smart Connector? A. Source B. Agent C. Device D. Root

The ArcSight ESM uses which component to gather events? A. Nodes B. Smart Connectors C. Collectors D. Adapters

Which schema group contains the timestamp of the event and name of the event? A. Source Event Schema B. Category Event Schema C. Agent Event Schema D. Root Event Schema

ArcSight IdentityView is utilized by which product? A. ArcSight Connectors B. ArcSight Logger C. ArcSight Connector Appliance D. ArcSight ESM

Which type of ESM resources are imported from an external Identity Management System by using IdentityView? A. Actors B. Asset Categories C. Users D. Customers

Which component performs event aggregation? A. ESM Database B. ESM Manager C. CORR-Engine D. Smart Connectors