RSA NetWitness Logs & Network Administrator Exam (050-11-CARSANWLN01) Free Practice Test

Question 1

Which of the following statements is true regarding Packet-based analysis in general?

A. Packet-based analysis is required for viewing log and session data

B. Packet-based analysis can be accomplished with common tools such as Wireshark

C. Packet-based analysis is based on metadata capture reduced to packets

D. Packet-based analysis is accomplished using the table-map xml file

Correct Answer: C

Question 2

In RSA NetWitness. viewing text or image data associated with a session is accessed through a

A. packet level drill

B. meta value view

C. decoder analysis view

D. session reconstruction view

Correct Answer: D

Question 3

To enable reporting alerts to be sent to the Respond interface, you would

A. set up an output action in a Report

B. set up an output action in the Report Engine configuration

C. configure forwarding of alerts in the Reporting Engine configuration

D. change the capture interface in Reporting sources

Correct Answer: C

Question 4

What is the main purpose of creating a meta group?

A. Perform Visualization analysis

B. Increase the amount of data available for analysis

C. Eliminate unneeded keys

D. Isolate log data

Correct Answer: C

Question 5

What are the two types of device index files available in RSA NetWitness?

A. index xml and index.orig.xml

B. index-rsa.txt and index-custom txt

C. index-rsa.xml and index-custom xml

D. index-<device> xml and index-<device>-custom xml

Correct Answer: D

Question 6

Service Groups are used primarily for

A. grouping hosts for batch configuration

B. deploying Live resources to specified services

C. grouping hosts for monitoring performance in the Health and Wellness view

D. grouping metadata from specified hosts

Correct Answer: B

Question 7

Which RSA NetWitness component captures and parses data off the wire?

A. Log Decoder

B. Packet Decoder

C. Concentrator

D. Broker

Correct Answer: B

Question 8

Which device index file should you use to create new meta keys?

A. index-<device>-custom xml

B. index-default xml

C. index-user, xml

D. index-<device> xml

Correct Answer: A

Welcome to TestSimulate

RSA NetWitness Logs & Network Administrator (050-11-CARSANWLN01) Free Practice Test