Quiz 642-545

Quiz 642-545, Implementing Cisco Security Monitoring, Analysis and Response System

which protocol for data archiving and restoring?

According to the following diagram displayed on the MARS GUI screen, can you tell me the reason that the Push function is not enabled (grayed out)?

Which three data points will you use to correlate reports in the Cisco Security MARS?

What will occur when you try to run a Cisco Security MARS query that will take a long time to complete?

Which description is correct with regard to Cisco Security MARS and Cisco IPS signature support?

What is the objective of the Service variables defined according to the following exhibit?

Which method can be used by the Cisco Security MARS appliance to perform IP address correlation (that is, map IP address translation) across NAT and PAT boundaries?

Which two statements best describe the Cisco Security MARS Event Management partial screen displayed?

Which two options are needed to enable Cisco Security MARS Level 3 operations?

what enables the Cisco Security MARS appliance to profile network usage and detect statistically significant anomalous behavior from a computed baseline?