Why would you lock a Case?
Why would you lock a Case?
What is the primary function of the ArcSight Manager?
What is the primary function of the ArcSight Manager?
Which ESM components collect event data?
Which ESM components collect event data?
What can you use to change the stage of a Case?
What can you use to change the stage of a Case?
What is the "focus" of a Focus report?
What is the “focus” of a Focus report?
Which type of event is displayed in an Active Channel with the following Inline Filter applied?
Which type of event is displayed in an Active Channel with the following Inline Filter
applied? Category Behavior = /Authentication/Verify Category Outcome = /Failure
what a report will look like when generated?
Which resource defines what a report will look like when generated?
What must be done to a local Variable before it can be used with multiple resources?
What must be done to a local Variable before it can be used with multiple resources?
Which functions are on the right-click menu for an event?
Which functions are on the right-click menu for an event? (Select two.)
Which role does the Active Channel play in testing a rule?
Which role does the Active Channel play in testing a rule?