Online Access Free HP0-A116 Practice Test

You want your Active Channel to automatically display new events as they arrive at ESM. Which time parameter should you use to accomplish this?

• A.Evaluate Once at Attach Time
• B.Continuously Evaluate
• C.Evaluate Continuously from Attach Time
• D.Evaluate $NOW-1h

What can you use to change the stage of a Case?

• A.Common Conditions Editor
• B.Event annotations
• C.Query Viewer
• D.Case Editor

What is the impact of checking Auto Update on the Search Results header, and selecting a time of 2 minutes?

• A.The current field set is refreshed, and any results that changed in the grid are flagged with a highlight.
• B.The current search query is rerun every 2 minutes following selection of the Auto Update check box
• C.ArcSight Command Center checks for any new software updates occurring in the previous 2 minutes.
• D.The time span for this search to complete is limited to 2 minutes, and the current results are displayed.

What is an example of an event-based Data Monitor?

• A.rules partial match
• B.session reconciliation
• C.last n events
• D.moving average

Which procedure allows you to terminate a session within a Session List? (Select two)

• A.Close the session by exiting the ArcSight Console.
• B.Adjust the Session setting in Console Preferences.
• C.Manually close the session using the right-click menu.
• D.Configure a rule action to explicitly terminate a session
• E.Exceed the time-out based on entry expiration time