Free RSA NetWitness Logs & Network Administrator Exam Braindumps (page: 7)

Page 6 of 18

To prevent a Meta key from being indexed on a core service, you can

  1. disable the parser for the Meta key in the device configuration
  2. add the value /eve/= indexNone to the key in the custom index file
  3. remove the Meta key from the Manage Default Meta Keys interface
  4. add the value valueMax= `'000000'' to the key in the custom index file

Answer(s): D



To enable reporting alerts to be sent to the Respond interface, you would

  1. set up an output action in the Report Engine configuration
  2. change the capture interface in Reporting sources
  3. configure forwarding of alerts in the Reporting Engine configuration
  4. set up an output action in a Report

Answer(s): C



In RSA Live, what is the deploy package option most commonly used for?

  1. Deploying content to the context hub
  2. Deploying a resource bundle
  3. Subscribing to a resource
  4. Deploying content to air gapped networks

Answer(s): C



To customize your query display in Events View, create

  1. Custom Meta Groups
  2. Custom Column Groups
  3. Profiles
  4. Dashlets

Answer(s): A






Post your Comments and Discuss RSA RSA NetWitness Logs & Network Administrator exam with other Community members:

RSA NetWitness Logs & Network Administrator Exam Discussions & Posts