Are you preparing for RSA NetWitness Logs & Network Administrator Exam? The RSA NetWitness Platform Administrator exam code is 050-11-CARSANWLN01. Passcert new cracked RSA NetWitness Platform 050-11-CARSANWLN01 Dumps which cover all the exam objectives and real practice questions with verified answers to help you pass your RSA 050-11-CARSANWLN01 exam successfully. Passcert ensures that the first time you take the 050-11-CARSANWLN01 exam will be able to pass the exam to obtain the RSA NetWitness Platform Administrator certification. 

The RSA NetWitness Platform Administrator examination is based on the critical job functions that an individual would typically be expected to perform with competence when administering the RSA NetWitness Platform product. An RSA NetWitness Platform Administrator is a person who has an IT administrator, IS Analyst, or Security Operations role within an organization.

General awareness of the functions and capabilities of the product

Configuration and management of the product

Monitoring and troubleshooting product operation

 

An RSA NetWitness Platform Administrator candidate should have a minimum of two years of experience in one or more of the following technical areas and understand how these technologies relate to and integrate with the RSA NetWitness Platform  product. Elements of the

Previous experience in computer and Network operations, information security, operating systems and system administration.

Familiarity with most basic system administration tools and processes.

Experience in user management, managing reports, and security-related tasks.

Web and Application Servers and Browsers.

Troubleshooting and problem determination skills.

Number of Questions: 70 questions

Duration: 85 minutes

Passing Score: 70%

Exam Cost: US$150.00

Format: multiple-choice, multiple-response, or true/false type questions

Language: North American English

The RSA NetWitness Platform  Administrator must have a fundamental knowledge of key features and benefits of the RSA NetWitness Platform  product. The RSA NetWitness Platform  Administrator is expected to be able to identify the functions that highlight the product features and capabilities within an RSA NetWitness Platform  environment and understand how the product can be used to identify security concerns.

Components

- Hosts

- REST API

- User interface

Data collection

- Packet capture

- Meta creation

The RSA NetWitness Platform  Administrator must have a fundamental knowledge of how to configure key components of the RSA NetWitness Platform  product and how to affect system changes to help gather data and provide consolidated metadata for analysis.

Configure Components

- Device configuration

- Reset password

- Create groups

- Configure health and wellness

- Configure log collection

Configure External Authentication

- Configure SecurID

The RSA NetWitness Platform  Administrator must have a fundamental knowledge of key investigation features in the RSA NetWitness Platform product in order to assure proper functioning of the Investigate module.

Rules

- Application rules

- Network rules

- Correlation rules

Live

- Feeds

- Packages

Investigate UI

- Views

- Queries

- Meta groups

- Context hub

The RSA NetWitness Platform  Administrator must have a fundamental knowledge of how to manage users. The RSA NetWitness Platform  Administrator is expected to be able to create and maintain users.

Trust model

 

The RSA NetWitness Platform  Administrator must have a fundamental knowledge of Reporting Engine configuration and operation.

Reporting Engine components

- Charts

- Rules

- Databases

- Output actions

- Lists

Reporting Engine configuration

- Output actions

- Notifications

- Data sources