Which type of ESM resources is able to create correlation events?
A.
Rules and correlation data monitors
B.
Reports
C.
Trend tables
D.
Active and session lists
Explanation:
http://www.ndm.net/siem/arcsight/arcsight-esm
Get 50% Discount on All Your Purchases
at PrepAway.com - Latest Exam Questions
This is ONE TIME OFFER
50%
Answer is A. ESM_101_6.8c.pdf pg. 57
0
0
Agree with C3p above that the correct answer is A: Rules & correlation data montiors
0
0