Free HP HP0-A116 Exam Dumps Questions & Answers

Which statement is true about the ArcSight Web interface?

• A.  Inline filters cannot be used in the ArcSight Web interface.
• B.  Data Monitors cannot be added to a Dashboard in the ArcSight Web interface.
• C.  Cases cannot be modified in the ArcSight Web interface.
• D.  Reports cannot be formatted in the ArcSight Web interface.

Command Center Event Search consists of which search syntax methods?

• A.  SQL query, regular expression, and complex expression search
• B.  field-based search, full-text search, and regular expression
• C.  full-field search, Boolean search, and regular expression search
• D.  field-query search, simple query search, and complex expression search

What is the impact of checking Auto Update on the Search Results header, and selecting a time of 2 minutes?

• A.  ArcSight Command Center checks for any new software updates occurring in the previous 2 minutes.
• B.  The current search query is rerun every 2 minutes following selection of the Auto Update check box
• C.  The time span for this search to complete is limited to 2 minutes, and the current results are displayed.
• D.  The current field set is refreshed, and any results that changed in the grid are flagged with a highlight.

Which statements are true about reports? (Select two.)

• A.  Archived reports must be restored before they can be used again
• B.  Reports can be based on Cases, Trends, Session Lists, and Events.
• C.  Reports can be scheduled to run yearly, monthly, weekly, daily, or hourly.
• D.  Reports cannot be based on Session Lists.
• E.  Only scheduled reports can be archived.

Which type of event is displayed in an Active Channel with the following Inline Filter applied?
Category Behavior = /Authentication/Verify
Category Outcome = /Failure

• A.  Account Locked events
• B.  Login Failure events
• C.  Login Success events
• D.  Logout events