Q1. Which column in the Asset or Identity list is combined with event security to make a notable event's urgency?
A.VIP
B. Priority
C. Importance
D. Criticality
Correct Answer: B
Q2. Which of the following ES features would a security analyst use while investigating a network anomaly notable?
A.Correlation editor.
B. Key indicator search.
C. Threat download dashboard.
D. Protocol intelligence dashboard.
Correct Answer: D
Q3. What are the steps to add a new column to the Notable Event table in the Incident Review dashboard?
A.Configure -> Incident Management -> Notable Event Statuses
B. Configure -> Content Management -> Type: Correlation Search
C. Configure -> Incident Management -> Incident Review Settings -> Event Management
D. Configure -> Incident Management -> Incident Review Settings -> Table Attributes
Correct Answer: D
Q4. How is it possible to specify an alternate location for accelerated storage?
A.Configure storage optimization settings for the index.
B. Update the Home Path setting in indexes, conf
C. Use the tstatsHomePath setting in props, conf
D. Use the tstatsHomePath Setting in indexes, conf
Correct Answer: C
Q5. Which columns in the Assets lookup are used to identify an asset in an event?
A.src, dvc, dest
B. cidr, port, netbios, saml
C. ip, mac, dns, nt_host
D. host, hostname, url, address
Correct Answer: C
$ 39
Reviews
There are no reviews yet.