In the event of a WAN link failure between the collector and the supervisor, by default, what is the maximum number of event files stored on the collector?

• A.20,000
• B.10,000
• C.40,000
• D.30,000

Comment: *

Name: *

Email: *

Verification: *

What will be the correct data type for inner query?

• A.INT16
• B.IP
• C.STRING
• D.INT32

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit.

The window for this rule is 30 minutes.
What is this rule tracking?

• A.A sudden 50% increase in WMI response times over a 30-minute time window
• B.A sudden 150% increase in WMI response times over a 30-minute time window
• C.A sudden 75% increase in WMI response times over a 30-minute time window
• D.A sudden 1.50 times increase in WMI response times over a 30-minute time window

Comment: *

Name: *

Email: *

Verification: *

Which two statements about phRuleWorker are true? (Choose two.)

• A.phRuleWorker uses a 60-second bucket as an evaluation window.
• B.phRuleWorker evaluates non-aggregate conditions as defined in subpattern filters of a rule in memory.
• C.phRuleWorker exists on both the supervisor and workers.
• D.phRuleWorker exists on the worker only.

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit.

If the Z-score for this rule is greater than or equal to three, what does this mean?

• A.The rate of firewall connection is optimum.
• B.The rate of firewall connection is below historical average value.
• C.The rate of firewall connection is above the current average value.
• D.The rate of firewall connection is above the historical average value.

Comment: *

Name: *

Email: *

Verification: *