HP0-M55 - ArcSight ESM Administrator
Go back to HP
What are potential ways of acknowledging notifications? (Select two.)
by replying to notification email
by using the Notifications Manager in the ArcSight Console
Which statements are true about SmartConnectors and batching? (Select two.)
Batches can be sent when they reach a certain size.
Batches can be sent in priority order by severity.
Which ArcSight Foundation should you use to identify traffic and bandwidth usage?
In Network Modeling, what is closest to being a subnet?
Preserve Raw Events, Turbo Mode, and Limit Event Processing Rate are all examples of which type of Connector options?
Package bundles are exported with which file extension?
What is the Reserve Period?
the number of future partitions to be maintained
Which statement is true about ArcSight Database structures?
Indices typically use more disk space than data tablespaces.
What must be done first to restore the database from an online backup?
ensure that the archived redo logs are located in the archive log destination
Which components does a Network Model include? (Select two.)
What does the ArcSight Manager use to automatically establish identity, ownership, and criticality of the assets installed on a network?
What is the default port used to connect the ArcSight Manager to the ArcSight ESM Database (Oracle)?
What is stored in a database partition?
events from a 24-hour time period
In Network Modeling, what are SmartConnectors bound to? (Select two.)
What is the name of the resource you can use to override the default ArcSight mapping IP addresses to geographic regions?
What is the default port used when connecting to the ArcSight Web interface?
Which statement is true about Connectors that are in a Paused state?
Paused Connectors are responding to the Manager but events are being cached.
What must you do prior to applying a patch to the ArcSight Manager?
stop the ArcSight Manager service
Which command is used to check the status of the TNS Listener?
What are ArcSight Foundations?
coordinated resources that provide monitoring, analysis, and reporting capabilities
Which statements are true about user groups? (Select two.)
They can be based on departments, permission levels, or roles.
They can be nested within other user groups.
Which statement is true about starting and stopping ArcSight SmartConnector services?
They are started and stopped independently of the other ArcSight component services.
Which document provides the most detailed instructions for applying an Oracle CPU?
Oracle CPU release notes
What do the start and end times associated with a notification destination indicate?
the period of time during which the notification can be sent
When configuring the ArcSight Database, what is the result of setting the offline archive period (Days) to Zero?
Partition Archiving is disabled.
What are capabilities of the ArcSight Manager? (Select two.)
receives event data from SmartConnectors
performs advanced event correlation and analysis
With regard to SmartConnectors, what is roll back?
a way to revert to the previous version of a Connector when a Connector upgrade fails
Which key pair types are valid selections when using the Manager Setup Wizard to create an SSL key pair? (Select two.)
self-signed key pair
demo key pair
Which ArcSight Manager directory should be backed up in order to preserve the server.properties file?
One of the benefits of SSL technology is authentication. What does authentication do?
ensures that clients send information to the actual intended server, not a machine pretending to be that server
Which command should you use to configure notification acknowledgements after the initial configuration of ArcSight ESM?
What does Partition Archiving allow you to specify?
the number of partitions to keep offline
Which statement is true about the ArcSight Web Server?
It is required if users will be accessing ESM through a web browser.
Which command is used to add a secondary destination to a Connector's configuration?
arcsight connectorsetup -w
Which actions might the whine daemon initiate? (Select two.)
sending a message to the admin consoles
writing an event to the server.log file
Which method is used to back up an Oracle database without shutting down the database?
Which file types MUST be included in an Oracle backup? (Select two.)
Using SSL technology, information can be communicated over an encrypted channel. What is SSL?
Secure Sockets Layer
What is a Network Model?
a representation of the nodes on a network and certain characteristics of the network itself
During Connector install, which statement is true about the ArcSight Manager's host name or IP address?
It must match the host name or IP address in the ArcSight Manager's SSL certificate.
Which are clients of the ArcSight Manager? (Select two.)
What is the default port used by the ArcSight ESM Console to connect to the ArcSight Manager?
Which statements are true about user groups and resources? (Select two.)
Resources are only visible to a user if the user's group has "Read" permissions for the resource.
To change a user's permission to access a resource group, you either change the permissions of the user's group or put the user in a new group with different permissions.
Which ArcSight Foundation should you use to identify and analyze unexpected modifications to systems, devices, or applications?
What is a trust store (sometimes called a key store)?
a list of trusted Certificate Authorities
There are three types of ArcSight SmartConnectors. Which type is used primarily to execute commands on a device to retrieve, modify, or analyze its configuration?
Which statement is true about ArcSight SmartConnectors acting in "passive" mode?
They receive events forwarded from originating devices.
What happens when a Connector upgrade that was initiated from within the ArcSight Console fails?
The Connector automatically rolls back to the previously working version.
The ArcSight Web release version must be the same version as what?
ArcSight SmartConnectors send event data directly to what?