1. Home
  2. RSA
  3. 050-11-CARSANWLN01 Exam Syllabus

RSA 050-11-CARSANWLN01 Exam Topics

RSA 050-11-CARSANWLN01 Exam Overview :

Exam Name: RSA NetWitness Logs & Network Administrator
Exam Code: 050-11-CARSANWLN01
Certifications: RSA Certified Administrator Certification
See Expected Questions: RSA 050-11-CARSANWLN01 Expected Questions in Actual Exam

RSA 050-11-CARSANWLN01 Exam Objectives :

Section Weight Objectives
Domain 1.0: Architecture 25% The RSA NetWitness Platform  Administrator must have a fundamental knowledge of key features and benefits of the RSA NetWitness Platform  product. The RSA NetWitness Platform  Administrator is expected to be able to identify the functions that highlight the product features and capabilities within an RSA NetWitness Platform  environment and understand how the product can be used to identify security concerns.

Content Areas

  • Components
    - Hosts
    - REST API
    - User interface
  • Data collection
    - Packet capture
    - Meta creation
Domain 2.0: Configuration 25%

The RSA NetWitness Platform  Administrator must have a fundamental knowledge of how to configure key components of the RSA NetWitness Platform  product and how to affect system changes to help gather data and provide consolidated metadata for analysis.

Content Areas

  • Configure Components
    - Device configuration
    - Reset password
    - Create groups
    - Configure health and wellness
    - Configure log collection
  • Configure External Authentication
    - Configure SecurID
Domain 3.0: Investigation 25% The RSA NetWitness Platform  Administrator must have a fundamental knowledge of key investigation features in the RSA NetWitness Platform product in order to assure proper functioning of the Investigate module.

Content Areas

  • Rules
    - Application rules
    - Network rules
    - Correlation rules
  • Live
    - Feeds
    - Packages
  • Investigate UI
    - Views
    - Queries
    - Meta groups
    - Context hub
Domain 4.0: User Management 15% The RSA NetWitness Platform  Administrator must have a fundamental knowledge of how to manage users. The RSA NetWitness Platform  Administrator is expected to be able to create and maintain users.

Content Areas

  • Trust model
Domain 5.0: Reporting Engine 10% The RSA NetWitness Platform  Administrator must have a fundamental knowledge of Reporting Engine configuration and operation.

Content Areas

  • Reporting Engine components
    - Charts
    - Rules
    - Databases
    - Output actions
    - Lists
  • Reporting Engine configuration
    - Output actions
    - Notifications
    - Data sources
Official Information https://community.rsa.com/docs/DOC-103261

Updates in the RSA 050-11-CARSANWLN01 Exam Topics:

RSA 050-11-CARSANWLN01 exam questions and practice test are the best ways to get fully prepared. Study4exam's trusted preparation material consists of both practice questions and practice test. To pass the actual  RSA Certified Administrator 050-11-CARSANWLN01  exam on the first attempt, you need to put in hard work on these questions as they cover all updated  RSA 050-11-CARSANWLN01 exam topics included in the official syllabus. Besides studying actual questions, you should take the  RSA 050-11-CARSANWLN01 practice test for self-assessment and actual exam simulation. Revise actual exam questions and remove your mistakes with the RSA NetWitness Logs & Network Administrator 050-11-CARSANWLN01 exam practice test. Online and Windows-based formats of the 050-11-CARSANWLN01 exam practice test are available for self-assessment.