EMT Practice Test

1. Question Content...

---

Question1: What can you use to change the stage of a Case?

Question2: Which resources can be displayed in the ArcSight Web interface? (Select two.)

Question3: Which ArcSight ESM Resource enables you to perform live monitoring of events?

Question4: Which output formats are available when running a report? (Select two.)

Question5: What can ArcSight ESM Dashboards display?

Question6: How do asset categorization and event categorization relate to each other?

Question7: Using SSL technology, information can be communicated over an encrypted channel. What is SSL?

Question8: Which user role is responsible for building content within ESM?

Question9: Why would you lock a Case?

Question10: Which command is a valid investigate command?

Question11: What is the name of the resource you can use to override the default ArcSight mapping of IP addresses to geographic regions?

Question12: What happens if a notification requiring a response within 24 hours is not acknowledged within that time?

Question13: In network modeling, which resource is used by MSSP or by users with different cost centers?

Question14: Which statement is true about inline filters?

Question15: What is a criteria factor within the ArcSight Priority Formula?

Question16: Which statements are true about event lifecycle data collection and the event processing phase?
(Select two.)

Question17: Which role does the Active Channel play in testing a rule?

Question18: Which statement is true about a join rule?

Question19: What are valid actions for a rule to take? (Select two.)

Question20: What must be done to a local Variable before it can be used with multiple resources?