Which statement best describes how baselines are established and used in Query Viewers? A. Baselines are created using query results, which are fed into the Image Editor for filtering and display in the related Data Monitor. B. Baselines are created…
Which functions are on the right-click menu for an event in the ConsoleViewer panel? (Select two.) A. Correlate Events B. Show Event Details C. Show Event Chart D. Annotate Events E. Prioritize Events
During which process is the first user created for access to ESM? A. during initial configuration of server-side SSL trust store B. during the authentication phase of the SmartConnector Installation C. during installation of the ArcSight Console D. during installation…
ESM components fail to consistently restart after a system reboot and require individual intervention with repeated arcsight_services component restart commands. Which log file offers troubleshooting information that will help resolve this issue? A. monit.log B. server.log C. arcsight_services.log D. server.status.log
Which ArcStght Console user settings can be changed in the Preferences Editor? A. default time period of Active Channels B. maximum number of viewable assets C. date and time format D. number of rows displayed in an Active Channel
What is the impact of checking Auto Update on the Search Results header, and selecting a time of 2 minutes? A. The time span for this search to complete is limited to 2 minutes, and the current results are displayed.…
What are the three general types of Data Monitors? A. event-based, correlation, and non-event based B. event-based, correlation, and aggregation matching C. event-based, matching conditions and non-event based D. event-based, event graph, and non-event based
Which component determines how a report looks when it is generated? A. Query B. Layout C. Form D. Template
What do the start and end times associated with a notification destination indicate? A. the period of time that the system waits for a notification response B. the period of time during which the notification can be received C. the…
Which processes occur in the first phase of the event lifecycle? (Select two.) A. evaluating event data B. applying event categories C. applying hashing to event data D. correlating event data E. normalizing event data