RSA 050-11-CARSANWLN01 RSA NetWitness Logs & Network Administrator Exam Online Training
RSA 050-11-CARSANWLN01 Online Training
The questions for 050-11-CARSANWLN01 were last updated at Apr 06,2025.
- Exam Code: 050-11-CARSANWLN01
- Exam Name: RSA NetWitness Logs & Network Administrator Exam
- Certification Provider: RSA
- Latest update: Apr 06,2025
To report on matches in the NWDB against a series of fixed values, include which feature in your report definition?
- A . An Application Rule
- B . A List
- C . An Enrichment Source
- D . A Subscription
To create a custom feed, initiate the action by selecting which top-level module?
- A . Investigate
- B . Admin
- C . Monitor
- D . Configure
Which of the following choices is defined as being a delineated set of network data units that comprise a transaction from start to finish’?
- A . Frame
- B . Packet
- C . Session
- D . Token
In RSA NetWitness. viewing text or image data associated with a session is accessed through a
- A . packet level drill
- B . meta value view
- C . session reconstruction view
- D . decoder analysis view
When storage on the core devices fills to capacity, what happens?
- A . new traffic cannot be ingested
- B . the decoder leverages capacity in the concentrator, and collection continues
- C . the decoder leverages capacity in the broker, and collection continues
- D . the oldest stored sessions are deleted and collection continues
Administrators can use the Profile feature to limit views with (Choose three)
- A . Meta groups
- B . Custom column groups
- C . Assigned pre-queries
- D . Automated role assignment
- E . Data privacy policies
- F . List view
To customize your query display in Events View, create
- A . Custom Meta Groups
- B . Custom Column Groups
- C . Profiles
- D . Dashlets
You can configure replication for log data by setting up a remote collector and creating
- A . a Virtual Log Collector
- B . a lockbox
- C . host groups
- D . destination groups
What types of data can the Archiver store?
- A . Raw Log only
- B . Raw Log and Log Meta
- C . Raw Log, Log Meta. Packet Meta
- D . Raw Log. Log Meta. Raw Packet. Packet Meta
Which RSA NetWitness component captures and parses data off the wire?
- A . Packet Decoder
- B . Broker
- C . Concentrator
- D . Log Decoder