050-11-CARSANWLN01 RSA NetWitness Logs & Network Administrator Exam Questions and Answers

assigned the role of Operator"

a member of a "DeviceUser" group in Active Directory

a member of a role that has privileges for the device

assigned read/write access to the NetWitness appliance

move and copy

download and enable

save and apply

subscribe and deploy

create a Report Rule

enable email notification in the Report rule

enable email notification in the Report Schedule view

create an output action in the Reporting Engine configuration

add the mail server as a data source to the Reporting Engine

Custom Meta Groups

Custom Column Groups

Profiles

Dashlets

EVENT_ANALYST, INTRUSION_ANALYST SOC-MANAGER, ADMIN, OPERATOR, RESPOND_ADMINlSTRATOR

EVENT_STREAM_ANALYST WAREHOUSE_ANALYST, ARCHIVER_ANALYST, DB_ANALYST ADMINISTRATOR

MALWARE_ANALYST, ESA_ANALYST, REPORT_ANALYST ADMINISTRATOR

ADMINISTRATORS, OPERATORS, ANALYSTS SOC_MANAGERS, MALWARE_ANALYSTS, DATA_PRIVACY_OFFICERS, RESPOND ADMINISTRATOR

index xml and index.orig.xml

index-rsa.txt and index-custom txt

index-rsa.xml and index-custom xml

index- xml and index--custom xml

The rule filters, truncates, keeps or otherwise flags data analyzed by RSA NetWitness

The rule is used primarily to distribute content among RSA NetWitness appliances

The rule uses external intelligence based on IP addresses or domains to add contextual content to network traffic

The rule is an open programming language for customizing logic into the RSA NetWitness processing engine to identify new protocols or extract data to be indexed