Online Access Free C1000-018 Practice Test

When is the rating of an Offense magnitude re-evaluated?

• A.when the number of vulnerabilities increases
• B.when the threat assessment changes
• C.when a port is opened
• D.when new events are added to the Offens

An analyst needs to investigate an Offense and navigates to the attached rule(s).
Where in the rule details would the analyst investigate the reason for why the rule was triggered?

• A.Rule responses
• B.Rule actions
• C.Rules response limiter
• D.List of test conditions

An analyst is investigating a series of events that triggered an Offense. The analyst wants to get more detailed information about the IP address from the reference set.
How can the analyst accomplish this?

• A.Click on Searches tab then perform an Advanced Search
• B.Click on Log Activity tab then perform a Quick Search
• C.Click on Searches tab then perform a Quick Search
• D.Click on Log Activity tab then perform an Advanced Search

An analyst needs to create a dashboard item that can be shared with other users. What is the main step in this process?

• A.Have users index the shared search criteria for reuse.
• B.Create and share the search criteria that the dashboard Item will use.
• C.Ask the administrator to modify the shared search criteria and test the dashboard.
• D.Enable a new custom dashboard and share it with users.

After working with an Offense, an analyst set the Offense as hidden. What does the analyst need to do to view the Offense at a later time?

• A.Search for all Offenses owned by the analyst
• B.Click Clear Filter next to the "Exclude Hidden Offenses".
• C.In the al Offenses view, select Actions, then select show hidden Offenses.
• D.In the all Offenses view, at the top of the view, select ''Show hidden'' from the ''Select an option'' drop- down.