Free RSA NetWitness Logs & Network Administrator Exam Braindumps (page: 8)

Page 7 of 18

Which of the following statements about the REST interface are true? (Choose two)

  1. The REST interface is available only for Concentrators and Decoders
  2. The REST interface is available separately for each core Service on the Host
  3. The REST interface for the Broker service defaults to 50103
  4. The REST interface for the Concentrator service defaults to 51005
  5. The REST interface for the Decoder service defaults to 50014

Answer(s): C,D



To create a custom feed, initiate the action by selecting which top-level module'?

  1. Investigate
  2. Admin
  3. Monitor
  4. Configure

Answer(s): D



To create meta keys that will appear in the Investigation view, you would most commonly edit configuration files on the

  1. Packet Decoder
  2. Concentrator
  3. Broker
  4. Log Decoder

Answer(s): D



Under the NetWitness Trust Model, in order to log in to multiple services a user need only have an account on which device?

  1. Concentrator.
  2. Packet Decoder
  3. NetWitness Server
  4. Windows Domain Controller

Answer(s): A






Post your Comments and Discuss RSA RSA NetWitness Logs & Network Administrator exam with other Community members:

RSA NetWitness Logs & Network Administrator Exam Discussions & Posts