Online Access Free 050-11-CARSANWLN01 Practice Test

To create a feed for all of your event sources, you could:

• A.Export event source data from the Manage Events Sources interface and create an identity feed
• B.Export event source data from the Manage Events Sources interface and create a custom feed
• C.Deploy a feed from Live
• D.Create a log parser

To automate incident creation of alerts in the Respond interface, create

• A.Reporting Rules
• B.Incident Rules
• C.ESA Rules
• D.Respond Rules

Which device index file should you use to create new meta keys?

• A.index-<device>-custom xml
• B.index-default xml
• C.index-<device> xml
• D.index-user, xml

To enable reporting alerts to be sent to the Respond interface, you would

• A.change the capture interface in Reporting sources
• B.set up an output action in the Report Engine configuration
• C.configure forwarding of alerts in the Reporting Engine configuration
• D.set up an output action in a Report

You configure an email server for notifications for everything except the Reporting Engine in:

• A.ADMIN > System > Global Notifications
• B.ADMIN > System > Email
• C.ADMIN > System > Global Auditing
• D.ADMIN > System > Legacy Notifications