Free HP HP0-M54 Exam Dumps Questions & Answers

Which type of event is displayed in an Active Channel with the following Inline Filter applied?
Category Behavior = /Authentication/Verify
Category Outcome = /Failure

• A.  Login Success events
• B.  Account Locked events
• C.  Login Failure events
• D.  Logout events

How are baselines established and used in Query Viewers?

• A.  Baselines are created using query results and fed into the Image Editor for the related Data Monitor.
• B.  Baselines are created using query results. The baseline from the query is used to create a new field set definition that can be run againstfuture events.
• C.  Baselines are created using query results. When a query has one or more baselines available, you can compare the current results with thebaseline.
• D.  Baselines are created using rules. After the rule is triggered, the resulting action establishes a baseline against which future rules areevaluated in the Query Viewer.

Which user role is responsible for building content within ESM?

• A.  Administrator
• B.  Analyst
• C.  Author
• D.  Operator

What is the primary function of the ArcSight Manager?

• A.  It accepts correlated, prioritized events from SmartConnectors with instructions from the ArcSight Console, and writes events to the database.
• B.  It restores the rule definitions that drive the functioning of ArcSight ESM.
• C.  It writes incoming events to the database while simultaneously processing events through the Correlation engine.
• D.  It manages bottlenecks between the connectors, the ArcSight Console, and the ESM Database.

Event correlation, event reconciliation, moving average, session reconciliation, and statistics are all examples of which type of Data Monitors?

• A.  event-based
• B.  system status
• C.  correlation
• D.  non-event-based