HP ArcSight Security Solutions (HP0-A100) Free Practice Test

Question 1

The ArcSight ESM uses which component to gather events?

A. Nodes

B. Collectors

C. SmartConnectors

D. Adapters

Correct Answer: C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 2

What is IAM an acronym for?

A. Identity Account Management

B. Identity and Access Management

C. Incident Account Management

D. Intrusion and Access Management

Correct Answer: B

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 3

Which feature of Arc Sight Smart Connectors reduces the quantity of events sent to the ESM Manager?

A. Normalization

B. Host name lookup

C. Aggregation

D. Categorization

Correct Answer: C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 4

Which statement is correct?

A. ArcSight Logger cannot compress data.

B. ArcSight Logger receives events from Connectors rather than from raw events

C. ArcSight Logger must be used together with an ArcSight ESM

D. ArcSight Logger event schema is different from the ESM event schema

Correct Answer: B

Question 5

In which phase are functions from the ESM Console (such as NS lookup, Ping, Port info, Trace route and who is) performed?

A. Trending

B. Workflow

C. Analysis

D. Correlation

Correct Answer: C

Question 6

What is CIP an acronym for?

A. Collector Intrusion Package

B. Component Instruction Package

C. Compliance Insight Package

D. Correlation Incursion Package

Correct Answer: C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Welcome to TestSimulate