156-315.77

156-315.77 practice questions, page 27 of 30, with answer review and explanations.

Question 131

SmartReporter reports can be used to analyze data from a penetration-testing regimen in all of the following examples, EXCEPT:

  1. Analyzing traffic patterns against public resources.
  2. Possible worm/malware activity.
  3. Analyzing access attempts via social-engineering.
  4. Tracking attempted port scans.

Question 132

What is the best tool to produce a report which represents historical system information?

  1. SmartReporter-Standard Reports
  2. SmartView Tracker
  3. Smartview Monitor
  4. SmartReporter-Express Reports

Question 133

If Jack was concerned about the number of log entries he would receive in the SmartReporter system, which policy would he need to modify?

  1. Log Sequence Policy
  2. Report Policy
  3. Log Consolidator Policy
  4. Consolidation Policy

Question 134

Your company has the requirement that SmartEvent reports should show a detailed and accurate view of network activity but also performance should be guaranteed. Which actions should be taken to achieve that? 1) Use same hard drive for database directory, log files, and temporary directory. 2) Use Consolidation Rules. 3) Limit logging to blocked traffic only. 4) Use Multiple Database Tables.

  1. 2, 4
  2. 1, 3, 4
  3. 1, 2, 4
  4. 1, 2

Question 135

To help organize events, SmartReporter uses filtered queries. Which of the following is NOT an SmartEvent event property you can query?

  1. Event: Critical, Suspect, False Alarm
  2. TimE. Last Hour, Last Day, Last Week
  3. TypE. Scans, Denial of Service, Unauthorized Entry
  4. StatE. Open, Closed, False Alarm