1. What happens if an event source device type is not immediately recognized by RSA enVision? (Check the one best answer.)
A. It will be defined as “unknown” and for a limited time enVision will collect event data it generates
B. Data from that device will be discarded until the device type can be defined
C. An alert is generated by default to call an administrator’s attention to be the device
D. The UDS Service will create a parsing XML file for the device and place data in the NIC Parse Cache
Answer: A

2. When setting up a Check Point firewall device, which of the following is a good practice that should be completed first? (Check the one best answer.)
A. Stop and restart the Check Point Firewall Service
B. Stop and restart the enVision NIC Collector Service
C. Verify that the Check Point Log Viewer is receiving events
D. Set an 8-character key to establish an authenticated connection
Answer: C

3. How many Remote Collectors (RC) can each Database Server (D-SRV) support? (Check the one best answer.)
A. Eight (8)
B. Ten (10)
C. Sixteen (16)
D. Thirty two (32)
Answer: C

4. After creating a customized Report Menu system, which RSA enVision service(s) need to be re-started?
A. Only the NIC Webserver Service
B. The NIC Webserver and NIC Server Services
C. The NIC Webserver, NIC Server and NIC Locator Services
D. The NIC Webserver, NIC Server, NIC Locator, and NIC Packager Services
Answer: A

5. When opening a connection in Event Explorer, you can define which of the following features? (Check the three correct answers.)
A. Devices
B. Event categories
C. Log messages
D. Time frame
E. Local collector
Answer: A, B, D

More free RSA certification exams