050-11-CARSANWLN01 RSA NetWitness Logs & Network Administrator Exam Question and Answers

Which step happens first in the RSA NetWitness data flow on the Packet Decoder when the capture interface is set to packet_mmap_"?

To add an action to the right-click menu in the Investigation Ul. create a

Which RSA NetWitness component captures and parses data off the wire?

What of the following components can be used to set up external authentication for RSA NetWitness?

To run a report you need to create which of the following?

Which of the following choices is defined as being a delineated set of network data units that comprise a transaction from start to finish'?

To create meta keys that will appear in the Investigation view, you would most commonly edit configuration files on the