050-728問題集、Novell実際の試験問題

Novell Identity and Security PartnerNet Specialization: Sentinel 6.1 - 050-728 模擬練習

質問 1

Which operator is used to evaluate regular expressions?

A. =

B. >

C. Match subnet()

D. Match regex()

正解: D

質問 2

Which statement about right-click actions is true? (Choose 2)

A. You can dynamically create a correlation rule

B. You can pass a Source IP addresses to a script

C. You can pass global filter settings to a script

D. You can pass a Destination User Name to a URL

E. You can mail iTRAC incident response history

正解: A,E

解説: (PassTest メンバーにのみ表示されます)

質問 3

Which component is used to communicate with the Sentinel database?

A. DAS PROXY

B. DAS binary

C. DAS RT

D. iScale

正解: A

質問 4

The Sentinel Correlation Engine Architecture is made up which components? (Choose 2)

A. Active views

B. DAS Query

C. Action Manager

D. Solution Pack Controls

E. Input manager

正解: A,B

解説: (PassTest メンバーにのみ表示されます)

質問 5

What is one purpose of using Taxonomy?

A. Simplify filtering

B. Maintain active view data

C. Transform data between events

D. Define user roles

正解: A

質問 6

Which correlation rule groups the events by initiator IP?

A. Filter(e.severity=2 and e.rv32 = "FW")

B. Filter(e.severity=40 and e.sip match subnet(192.168.1.1)) flow trigger(30,5)

C. Filter(e.severity=4) flow trigger(30,5,discriminator(e.sip))

D. Filter(e.severity=4) flow trigger(30,5)

E. Filter (e.severity=4) union filter(e.severity=3 and e.rv32 = "FW") flow trigger(30,5)

正解: B