RSA 050 11 CARSANWLN01
Q: 1
To run a report you need to create which of the following?
Options
Q: 2
If you choose "Stop Rule Processing" in your Application Rule definition, which of the following are
action choices? (Choose three)
Options
Q: 3
Which RSA NetWitness component indexes metadata extracted from network or log data and makes
it available for querying?
Options
Q: 4
The types of feeds that you can add to RSA NetWitness are:
Options
Q: 5
Which of the following statements best defines an RSA NetWitness application rule?
Options
Q: 6
Which device index file should you use to create new meta keys?
Options
Q: 7
The logical operators available for Querying in Investigations depend on the Index Level of the
individual meta key Which Index Level limits your query to the logical operators "exists'' and
'texists""?
Options
Q: 8
Parsers can be enabled on which of the following?
Options
Q: 9
Which of the following statements about the REST interface are true? (Choose two)
Options
Q: 10
What types of data can the Archiver store?
Options
Question 1 of 10
