1. Home
  2. RSA
  3. 050-11-CARSANWLN01 Exam Syllabus

RSA 050-11-CARSANWLN01 Exam Syllabus

Start Free 050-11-CARSANWLN01 Exam Practice After Reviewing the Topics

Before starting your 050-11-CARSANWLN01 exam preparation, it is recommended to review the complete RSA NetWitness Logs & Network Administrator exam syllabus and carefully go through the exam objectives listed below. Once you understand the exam structure and objectives, you should practice using our free 050-11-CARSANWLN01 questions. We also provide premium 050-11-CARSANWLN01 practice test, fully updated according to the latest exam objectives, to help you accurately assess your preparedness for the actual exam.

RSA
Vendor
050-11-CARSANWLN01
Exam Code
71
Total Questions
5
Total Exam Domains

START FREE 050-11-CARSANWLN01 EXAM PRACTICE

NO SIGNUP REQUIRED  •  100% FREE TO START

050-11-CARSANWLN01 EXAM QUESTIONS

RSA 050-11-CARSANWLN01 Exam Objectives

Section 1: Domain 1.0: Architecture
Weight:
25%
The RSA NetWitness Platform  Administrator must have a fundamental knowledge of key features and benefits of the RSA NetWitness Platform  product. The RSA NetWitness Platform  Administrator is expected to be able to identify the functions that highlight the product features and capabilities within an RSA NetWitness Platform  environment and understand how the product can be used to identify security concerns.

Content Areas

  • Components
    - Hosts
    - REST API
    - User interface
  • Data collection
    - Packet capture
    - Meta creation
Section 2: Domain 2.0: Configuration
Weight:
25%

The RSA NetWitness Platform  Administrator must have a fundamental knowledge of how to configure key components of the RSA NetWitness Platform  product and how to affect system changes to help gather data and provide consolidated metadata for analysis.

Content Areas

  • Configure Components
    - Device configuration
    - Reset password
    - Create groups
    - Configure health and wellness
    - Configure log collection
  • Configure External Authentication
    - Configure SecurID
Section 3: Domain 3.0: Investigation
Weight:
25%
The RSA NetWitness Platform  Administrator must have a fundamental knowledge of key investigation features in the RSA NetWitness Platform product in order to assure proper functioning of the Investigate module.

Content Areas

  • Rules
    - Application rules
    - Network rules
    - Correlation rules
  • Live
    - Feeds
    - Packages
  • Investigate UI
    - Views
    - Queries
    - Meta groups
    - Context hub
Section 4: Domain 4.0: User Management
Weight:
15%
The RSA NetWitness Platform  Administrator must have a fundamental knowledge of how to manage users. The RSA NetWitness Platform  Administrator is expected to be able to create and maintain users.

Content Areas

  • Trust model
Section 5: Domain 5.0: Reporting Engine
Weight:
10%
The RSA NetWitness Platform  Administrator must have a fundamental knowledge of Reporting Engine configuration and operation.

Content Areas

  • Reporting Engine components
    - Charts
    - Rules
    - Databases
    - Output actions
    - Lists
  • Reporting Engine configuration
    - Output actions
    - Notifications
    - Data sources
Info
https://community.rsa.com/docs/DOC-103261