050-728 by Novell Valid Free Exam Practice Test

Question 1

Which component is used to communicate with the Sentinel database?

A. DAS binary B. DAS RT C. DAS PROXY D. iScale

Correct Answer: C

Question 2

Which attributes influence when an element is removed from a Dynamic list? (Choose 3.)

A. Amount of memory on iScale message Bus B. Database capacity C. Maximum number of elements D. Sentinel data manager scheduling E. Persistent/transient setting F. Element life span G. Number of correlation rules that are deployed

Correct Answer: C,E,F

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 3

You want to create a correlation rule that looks for 5 events coming from the same machine in 2 minutes. Which option should you choose in the Correlation Wizard to complete the rule?

A. Composite B. Aggregate C. Simple D. Sequence

Correct Answer: C

Question 4

Which statement is true?

A. Each collector manager can run either Javascript or proprietary Collectors, but only one type at a time. You can configure this in the configuration xml file. B. The collector manager can run both javascript and proprietary Collectors simultaneously. It functions differently for the different collector types. C. Each collector Manager can run either Javascript or proprietary Collectors, but only one type at a time. You can configure this in the Event source Management interface. D. Each Collector Manager can run only one type of collector - javascript or proprietary. You must choose one option when installing the collector

Correct Answer: C

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 5

Which correlation rule groups the events by initiator IP?

A. Filter(e.severity=4) flow trigger(30,5) B. Filter(e.severity=40 and e.sip match subnet(192.168.1.1)) flow trigger(30,5) C. Filter(e.severity=4) flow trigger(30,5,discriminator(e.sip)) D. Filter(e.severity=2 and e.rv32 = "FW") E. Filter (e.severity=4) union filter(e.severity=3 and e.rv32 = "FW") flow trigger(30,5)

Correct Answer: B

Question 6

Which functions are performed using the Sentinel Data Manager? (Choose 2)

A. Raw Event Storage B. Re-import partitions C. Correlation rule Management D. Manual achieving E. User creation F. Database creation

Correct Answer: B,D

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Novell Identity and Security PartnerNet Specialization: Sentinel 6.1 - 050-728 Exam Practice Test