Free HP HP0-A116 Practice Test & Real Exam Questions

Exam Code/Number: HP0-A116
Exam Name/Title: HP ArcSight ESM 6.5 Security Administrator and Analyst
Certification Provider: HP
Corresponding Certification: HP ASE

Exam Questions: 180
Updated On: Jun 10, 2026

Question #15

Which statement best describes how baselines are established and used in Query Viewers?

A. Baselines are created using query results. When a query has one or more baselines available, you can compare the current results with a baseline.

B. Baselines are created using rules. After the rule is triggered, the resulting action establishes a baseline against which future rules are evaluated in the Query Viewer.

C. Baselines are created using query results. The baseline from the query is used to create a new field set definition that can be run against future events.

D. Baselines are created using query results, which are fed into the Image Editor for filtering and display in the related Data Monitor.

Discussion 0

Correct Answer: B Vote an answer

Question #16

When specifying the attributes of a new Active List, you can set TTL days, hours, and minutes. What is TTL?

A. Total Time Left

B. Total Time Lag

C. Time To Live

D. Time Threshold Lag

Discussion 0

Correct Answer: C Vote an answer

Question #17

Active Channel views and Dashboard views are examples of Viewer Panel views. Which other views are associated with the Viewer Panel? (Select two.)

A. Simple views

B. Asset views

C. Results views

D. Combined views

E. Resource views

Discussion 0

Correct Answer: C,E Vote an answer

Question #18

Which access type is provided with ESM Access Control Lists?

A. Specific User Group read and write access to specific Resource Groups

B. Specific User Group read and write access to a specific Resource

C. Specific User read and write access to a specific Resource

D. Specific User read and write access to specific Resource Groups

Discussion 0

Correct Answer: A Vote an answer

Question #19

What Is the ArcSight Event Schema?

A. a collection of SmartConnectors that provide data to the ArcSight Manager

B. a map correlating IP addresses with devices to designate the source of events

C. a format into which event data is normalized prior to persistence into storage

D. a set of events with a common format, collected over a user-defined time period

Discussion 0

Correct Answer: D Vote an answer

Question #20

Which procedure allows you to terminate a session within a Session List? (Select two)

A. Exceed the time-out based on entry expiration time

B. Adjust the Session setting in Console Preferences.

C. Configure a rule action to explicitly terminate a session

D. Manually close the session using the right-click menu.

E. Close the session by exiting the ArcSight Console.

Discussion 0

Correct Answer: A,E Vote an answer

Question #21

Which four basic Event Search elements affect what is displayed in the Search results?

A. filter, constraints, time range, and field set

B. filter, constraints, time range, and row limit

C. filter, time range, variables, and field set

D. filter, time range, time zone, and field set

Discussion 0

Correct Answer: A Vote an answer

Question #22

Which functions are on the right-click menu for an event? (Select two.)

A. Prioritize Events

B. Correlate Events

C. Show Event Details

D. Annotate Events

Discussion 0

Correct Answer: C,D Vote an answer

Question #23

At most, a zone can belong to how many networks?

A. 2

B. 1

C. 0 (Zones do not belong to networks, zones contain networks.)

D. as many as needed based on the Network Model

Discussion 0

Correct Answer: B Vote an answer

Question #24

Which statements are true about retention areas? (Select two.)

A. Archived partitions outside the offline archive period become invalid.

B. Retention areas can be configured using the Partition Management Wizard.

C. If the size of a retention area is reduced, the data outside of the retention area is automatically backed up.

D. Retention policies cannot be changed once they are set.

Discussion 0

Correct Answer: A,B Vote an answer

Question #25

Which process uncovers the relationship between events, infers the significance of those relationships, prioritizes them, and then provides a framework for taking action?

A. filtration

B. correlation

C. categorization

D. aggregation

Discussion 0

Correct Answer: B Vote an answer

Question #26

In Network Modeling, what are SmartConnectors bound to? (Select two.)

A. customers

B. zones

C. devices

D. networks

Discussion 0

Correct Answer: A,D Vote an answer

Question #27

How are baselines established and used in Query Viewers?

A. Baselines are created using query results and fed into the Image Editor for the related Data Monitor.

B. Baselines are created using rules. After the rule is triggered, the resulting action establishes a baseline against which future rules are evaluated in the Query Viewer.

C. Baselines are created using query results. The baseline from the query is used to create a new field set definition that can be run against future events.

D. Baselines are created using query results. When a query has one or more baselines available, you can compare the current results with the baseline.

Discussion 0

Correct Answer: D Vote an answer

Question #28

Which statements are true about escalation levels? (Select two.)

A. They are contained in notification group configurations.

B. New escalation levels are added to the beginning of an escalation level sequence.

C. They must be defined separately for each notification type.

D. They must be created in the order in which you want escalation to proceed.

E. Custom escalation levels can be added at anytime.

Discussion 0

Correct Answer: C,D Vote an answer

Download Free HP HP0-A116 Demo

Simply submit your e-mail address below to get started with our free demo of your HP HP0-A116 exam.