RSA RSA NetWitness Logs & Network Administrator Exam
RSA NetWitness Logs & Network Administrator (050-11-CARSANWLN01) (Page 2 )

Updated On: 19-Jan-2026

Application rules can be configured on

  1. Log Decoder
  2. Log Decoder and Packet Decoder
  3. Log Decoder, Packet Decoder, and Concentrator
  4. Log Decoder, Packet Decoder, Concentrator, and Broker

Answer(s): C



What are three important things to configure on a Log Decoder'?

  1. Capture Auto-Start. Service Parsers, Capture Interface
  2. Capture Settings. Aggregation Auto-Start. Profile settings
  3. Investigation Settings. Capture Settings. Service Parsers
  4. Aggregation Auto-Start. Capture Settings. Investigation Settings

Answer(s): A



In order to run Reports against data stored on the Archiver you must

  1. restore data from cold storage to any hot storage device
  2. restore the Archiver data to any Concentrator
  3. add the Archiver to the Reporting Engine's list of configured data sources
  4. add the Archiver to the Concentrator's list of configured data sources

Answer(s): D



The accuracy of Automated Threat Detection is enhanced by configuring

  1. Who is Lookup Service
  2. Incident Rules
  3. ESA Analytics Mappings
  4. Context Hub

Answer(s): A



To use RSA SecurlD as an authentication method for administrators, what must be configured?

  1. PAM
  2. CHAP
  3. RADIUS
  4. LDAP

Answer(s): D



Viewing page 2 of 16
Viewing questions 6 - 10 out of 71 questions



Post your Comments and Discuss RSA RSA NetWitness Logs & Network Administrator exam prep with other Community members:

Join the RSA NetWitness Logs & Network Administrator Discussion