Free RSA NetWitness Logs & Network Administrator Exam Braindumps
RSA NetWitness Logs & Network Administrator (050-11-CARSANWLN01) Questions 21–25 (page: 6)

Updated On: 9-Feb-2026

To prevent a Meta key from being indexed on a core service, you can

  1. disable the parser for the Meta key in the device configuration
  2. add the value /eve/= indexNone to the key in the custom index file
  3. remove the Meta key from the Manage Default Meta Keys interface
  4. add the value valueMax= `'000000'' to the key in the custom index file

Answer(s): D



To enable reporting alerts to be sent to the Respond interface, you would

  1. set up an output action in the Report Engine configuration
  2. change the capture interface in Reporting sources
  3. configure forwarding of alerts in the Reporting Engine configuration
  4. set up an output action in a Report

Answer(s): C



In RSA Live, what is the deploy package option most commonly used for?

  1. Deploying content to the context hub
  2. Deploying a resource bundle
  3. Subscribing to a resource
  4. Deploying content to air gapped networks

Answer(s): C



To customize your query display in Events View, create

  1. Custom Meta Groups
  2. Custom Column Groups
  3. Profiles
  4. Dashlets

Answer(s): A



Which of the following statements about the REST interface are true? (Choose two)

  1. The REST interface is available only for Concentrators and Decoders
  2. The REST interface is available separately for each core Service on the Host
  3. The REST interface for the Broker service defaults to 50103
  4. The REST interface for the Concentrator service defaults to 51005
  5. The REST interface for the Decoder service defaults to 50014

Answer(s): C,D



Viewing page 6 of 16
Viewing questions 26 - 30 out of 71 questions


Post your Comments and Discuss RSA RSA NetWitness Logs & Network Administrator exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!