What are the two types of device index files available in RSA NetWitness?A . index xml and index.orig.xmlB . index-rsa.txt and index-custom txtC . index-rsa.xml and index-custom xmlD . index-<device> xml and index-<device>-custom xmlView AnswerAnswer:...
To create a custom feed, initiate the action by selecting which top-level module?A . InvestigateB . AdminC . MonitorD . ConfigureView AnswerAnswer: D
Which RSA NetWitness component indexes metadata extracted from network or log data and makes it available for querying?A . BrokerB . InformerC . SpectrumD . ConcentratorView AnswerAnswer: D
To create a feed for all of your event sources, you could:A . Deploy a feed from LiveB . Export event source data from the Manage Events Sources interface and create a custom feedC ....
Which of the following statements about the REST interface are true? (Choose two)A . The REST interface is available only for Concentrators and DecodersB . The REST interface is available separately for each core Service...
Which of the following statements about Health and Wellness Policies is false?A . Policies can be defined by NW administratorsB . Out-of-the-box policies are enabled by defaultC . Out-of-the-box policies can be edited by NW...
Where is the PAM configuration file located on an RSA NetWitness appliance'?A . /etc/hostsB . /etc/pam.dC . /opVbin/pamD . /usr/birVconfigView AnswerAnswer: B
Which of the following choices is defined as being a delineated set of network data units that comprise a transaction from start to finish'?A . FrameB . PacketC . SessionD . TokenView AnswerAnswer: C
To customize your query display in Events View, createA . Custom Meta GroupsB . Custom Column GroupsC . ProfilesD . DashletsView AnswerAnswer: B
To add an action to the right-click menu in the Investigation Ul. create aA . Right-click actionB . ProfileC . Context Hub ListD . Context Menu ActionView AnswerAnswer: D