When specifying the attributes of a new Active List, you can set TTL days, hours, and minutes. What is TTL?
A. Total Time Lag
B. Time Threshold Lag
C. Time To Live
D. Total Time Left
By default, which TCP/IP port is used by ArcSight Command Center to communicate with a web browser client?
A. 1521
B. 9443
C. 8443
D. 443
What is the impact of checking Auto Update on the Search Results header, and selecting a time of 2 minutes?
A. The time span for this search to complete is limited to 2 minutes, and the current results are displayed.
B. The current field set is refreshed, and any results that changed in the grid are flagged with a highlight.
C. The current search query is rerun every 2 minutes following selection of the Auto Update check box
D. ArcSight Command Center checks for any new software updates occurring in the previous 2 minutes.
What must be done first to restore the database from an online backup?
A. run the Oracle restore wizard
B. ensure that the archived redo logs are located in the archive log destination
C. bring the affected tablespaces online
D. reinstall the Oracle installation
There are 17 event field groups defined in the ArcSight Event Schema. In which group would you look for data fields describing an event's importance as assessed by ArcSight ESM?
A. Category
B. Threat
C. Attacker
D. Event
Which statement is true about ArcSight Database structures?
A. Data tablespaces typically use more disk space than indices.
B. Indices typically use more disk space than data tablespaces.
C. There is no appreciable difference between index and data tablespaces.
D. The system data tablespace is always much larger than the event data tablespace.
Which user role is responsible for building content within ESM?
A. Administrator
B. Analyst
C. Author
D. Operator
Which statements are true about assets? (Select two.)
A. Assets can be grouped in folders called asset ranges.
B. Assets require a MAC address to be categorized properly.
C. Assets can include bridges, routers, web servers, or anything with an IP or MAC address.
D. An asset is any endpoint considered significant enough to characterize with details to help with correlation and reporting.
Which ArcStght Console user settings can be changed in the Preferences Editor?
A. default time period of Active Channels
B. maximum number of viewable assets
C. date and time format
D. number of rows displayed in an Active Channel
What is a bundle?
A. a set of resources that makes up a package
B. a data transmission containing SSL information
C. a set of raw log events before they are parsed
D. a container for one or more packages
