Free HP HP0-M54 Exam Dumps Questions & Answers

What stores information about logons, user actions, and the resulting events in the most concise way?

• A.Cases
• B.Event annotations
• C.Session Lists
• D.Active Lists

Which ArcSight ESM Resource enables you to perform live monitoring of events?

• A.Cases
• B.Knowledge Base
• C.Stages
• D.Active Channels

Which statement is true about how filters are applied by the Connector or by the Manager?

• A.When filters are applied by either the Connector or the Manager, events that match the filter conditions are excluded and are not forwardedfor further processing.
• B.Events that match the Connector filter are excluded and not forwarded further; events that match the Manager filter are selected for furtheranalysis.
• C.When filters are applied by either the Connector or the Manager, events that match the filter conditions are selected and forwarded forfurther processing.
• D.Events that match the Connector filter are included and forwarded to the Manager; events that match the Manager filter are excluded.

There are 17 event field groups defined in the ArcSight Event Schema. In which group would you look for data fields describing an event's importance as assessed by ArcSight ESM?

• A.Threat
• B.Category
• C.Attacker
• D.Event

What are functions of Query Viewers? (Select two.)

• A.provide a baseline analysis of events against which future queries can be compared
• B.determine which devices are off-line at any given point in time by querying their status
• C.present detailed comparisons of report elements, not possible with the reporting tool
• D.provide a quick way to run SQL queries and identify trends without running reports
• E.display the Boolean logic behind filters and rules