PDF Version DemoHP HP0-M54 Exam Overview:
| Certification Vendor: | HP (Hewlett-Packard, now Micro Focus/OpenText) |
|---|---|
| Exam Name: | ArcSight ESM Security Analyst |
| Exam Number: | HP0-M54 |
| Exam Duration: | 90 minutes |
| Exam Format: | Multiple Choice |
| Available Languages: | English |
| Exam Price: | $125 USD |
| Real Exam Qty: | 50-59 |
| Certificate Validity Period: | 3 years |
| Passing Score: | 72% |
| Related Certifications: | HP ExpertONE Certification HP ArcSight ESM Security Administrator |
| Recommended Training: | ArcSight ESM Security Analyst Training |
| Exam Registration: | Prometric Registration Micro Focus Certification Portal |
| Sample Questions: | HP HP0-M54 Sample Questions |
| Exam Way: | Onsite at authorized testing centers (Prometric); no online proctoring |
| Pre Condition: | No mandatory prerequisites; recommended 6 months hands-on experience with ArcSight ESM or completion of HP/Micro Focus recommended training |
| Official Syllabus URL: | https://community.microfocus.com/cfs-file/__key/communityserver-discussions-components-files/224/HP0_2D00_M54_5F00_AESAPrepG_5F00_v112011.pdf |
HP HP0-M54 Exam Syllabus Topics:
| Section | Weight | Objectives |
|---|---|---|
| Case Management | 15% | - Creating and Updating Cases - Associating Events and Alerts - Locking and Archiving Cases |
| ArcSight ESM Architecture and Components | 20% | - ESM Deployment Overview - ESM Core Components
|
| Correlation Rules and Alerts | 20% | - Priority and Severity Calculation - Rule Structure and Logic - Alert Generation and Handling - Threshold and Time-based Conditions |
| Event Monitoring and Analysis | 25% | - Asset and Zone Management - Event Filtering and Search - Field Sets and Views - Active Channels |
| ESM Web Interface and Navigation | 10% | - Accessing Resources - Web Console Features |
| Reporting and Dashboards | 10% | - Custom Queries and Reports - Dashboard Configuration - Using Predefined Reports |
HP ArcSight ESM Security Analyst Sample Questions:
Question #1
In network modeling, which resource is used by MSSP or by users with different cost centers?
A. asset groups
B. networks
C. customers
D. zones
Question #2
Which statement is true about how filters are applied by the Connector or by the Manager?
A. When filters are applied by either the Connector or the Manager, events that match the filter conditions are excluded and are not forwardedfor further processing.
B. When filters are applied by either the Connector or the Manager, events that match the filter conditions are selected and forwarded forfurther processing.
C. Events that match the Connector filter are excluded and not forwarded further; events that match the Manager filter are selected for furtheranalysis.
D. Events that match the Connector filter are included and forwarded to the Manager; events that match the Manager filter are excluded.
Question #3
What is a criteria factor within the ArcSight Priority Formula?
A. Asset Priority
B. Model Confidence
C. Seriousness
D. Assurance
Question #4
You want your Active Channel to automatically display new events as they arrive at ESM. Which time parameter should you use to accomplish this?
A. Continuously Evaluate
B. Evaluate $NOW-1h
C. Evaluate Once at Attach Time
D. Evaluate Continuously from Attach Time
Question #5
Which ArcSight ESM Resource enables you to perform live monitoring of events?
A. Knowledge Base
B. Active Channels
C. Cases
D. Stages
Solutions:
| Question #1 Correct Answer: C | Question #2 Correct Answer: C | Question #3 Correct Answer: B | Question #4 Correct Answer: A | Question #5 Correct Answer: B |
We are confident about the products and aim to help you pass with ease. In case of failure, we will provide a no hassle full money back guarantee for the purchasing fee.
661 Customer Reviews
Quality and ValueITbraindumps Practice Exams are written to the highest standards of technical accuracy, using only certified subject matter experts and published authors for development - no all study materials.
Tested and ApprovedWe are committed to the process of vendor and third party approvals. We believe professionals and executives alike deserve the confidence of quality coverage these authorizations provide.
Easy to PassIf you prepare for the exams using our ITbraindumps testing engine, It is easy to succeed for all certifications in the first attempt. You don't have to deal with all dumps or any free torrent / rapidshare all stuff.
Try Before BuyITbraindumps offers free demo of each product. You can check out the interface, question quality and usability of our practice exams before you decide to buy.