156-315.77

156-315.77 practice questions, page 23 of 30, with answer review and explanations.

Question 111

A tracked SmartEvent Candidate in a Candidate Pool becomes an Event. What does NOT happen in the Analyzer Server?

  1. SmartEvent provides the beginning and end time of the Event.
  2. The Event is kept open, but condenses many instances into one Event.
  3. The Correlation Unit keeps adding matching logs to the Event.
  4. SmartEvent stops tracking logs related to the Candidate.

Question 112

How many pre-defined exclusions are included by default in SmartEvent R77 as part of the product installation?

  1. 5
  2. 0
  3. 10
  4. 3

Question 113

What is the purpose of the pre-defined exclusions included with SmartEvent R77?

  1. To allow SmartEvent R77 to function properly with all other R71 devices.
  2. To avoid incorrect event generation by the default IPS event definition; a scenario that may occur in deployments that include Security Gateways of versions prior to R71.
  3. As a base for starting and building exclusions.
  4. To give samples of how to write your own exclusion.

Question 114

What is the benefit to running SmartEvent in Learning Mode?

  1. There is no SmartEvent Learning Mode
  2. To generate a report with system Event Policy modification suggestions
  3. To run SmartEvent, with a step-by-step online configuration guide for training/setup purposes
  4. To run SmartEvent with preloaded sample data in a test environment

Question 115

_____ is NOT an SmartEvent event-triggered Automatic Reaction.

  1. SNMP Trap
  2. Block Access
  3. Mail
  4. External Script