A site has a single existing search head which hosts a mix of both CIM and non-CIM compliant applications. All of the applications are mission-critical. The customer wants to carefully control cost, but wants good ES performance. What is the best practice for installing ES?
A) Install ES on the existing search head.
B) Add a new search head and install ES on it.
C) Increase the number of CPUs and amount of memory on the search head, then install ES.
D) Delete the non-CIM-compliant apps from the search head, then install ES.
Correct Answer:
Verified
Q24: After installing Enterprise Security, the distributed configuration
Q25: When investigating, what is the best way
Q26: Which of the following ES features would
Q27: Where are attachments to investigations stored?
A) KV
Q28: How should an administrator add a new
Q30: What feature of Enterprise Security downloads threat
Q31: An administrator is provisioning one search head
Q32: When ES content is exported, an app
Q33: Who can delete an investigation?
A) ess_admin users
Q34: What is the default schedule for accelerating
Unlock this Answer For Free Now!
View this answer and more for free by performing one of the following actions
Scan the QR code to install the App and get 2 free unlocks
Unlock quizzes for free by uploading documents