• Description: Implementing Cisco Security Monitoring, Analysis and Response
• Passing Score: 0%
• Practice Test - Number of questions: 40 questions
• Simulation Test - Number of questions: 40 questions
• Simulation Test Duration: 120 minutes
• Has explanations: No

What is a benefit of using the dollar variable (as in $TARGET01) when creating queries in Cisco Security MARS?

Answer(s)

1. The dollar variable enables multiple queries to reference the same common 5-tuple informationusing a variable.
2. The dollar variable ensures that the probes and attacks that are reported are happening to thesame host.
3. The dollar variable allows matching of any unknown reporting device.
4. The dollar variable allows matching of any event type groups.
5. The dollar variable enables the same query to be applied to different reports.
6. The dollar variable enables the same query to be applied to different cases.

The dollar variable ensures that the probes and attacks that are reported are happening to thesame host.