Online Access Free HP0-M54 Practice Test

What can you use to change the stage of a Case?

• A.Case Editor
• B.Common Conditions Editor
• C.Event annotations
• D.Query Viewer

When using the Query Editor, three sub-tabs provide the options you need to properly set up the query. What information do these sub-tabs require?

• A.when the query should be run; what the query should be called; how long the data should be archived
• B.which data fields to select; how the data should be ordered; how the data should be grouped
• C.which data fields to select; how the data should be displayed; how long the data should be archived
• D.when the query should be run; which format the query output should take; how many data elements should be included

What are the three types of Data Monitors?

• A.event-based, event graph, and non-event based
• B.event type, matching conditions, and non-event
• C.event-based, correlation, and non-event based
• D.event type, correlation, and aggregation matching

Which statement is true about join rules and chained rules?

• A.Join rules link simple rules together; chained rules link join rules.
• B.Join rules use Session Lists; chained rules use Active Lists.
• C.Chained rules result in detailed chains; join rules result in simple chains.
• D.Chained rules may or may not be join rules that also use Active Lists or rely on Correlation events generated by other rules.

Which resources can be displayed in the ArcSight Web interface? (Select two.)

• A.Knowledge Base articles and Templates
• B.Queries and Partitions
• C.Cases, Notifications, and Active Channels
• D.Reports and Dashboards