IBM Security Qradar SIEM Implementation v7.2.1 Sample Questions:
1. What should the format of a CSV file be while importing assets on the QRadar console?
A) ip.name.severity.description
B) ip.name.weight.description
C) ip,portweight,description
D) ip,name,weightmagnitude
2. From the given event payload format:
You are tasked with creating a Reference Set of the second IPs in the payload.
What needs to be done to complete this task?
A) Create a Custom Event Property to parse the second IP in the payload. Create a rule that tests for events from the Log Source that is collecting the above event, and for Rule Response add the Custom Event Property to the Reference Set.
B) From the Reference Set Management screen, select "create reference set from Log Source Event". Pick the Log Source from the drop down. Pick the Custom Event Property from the drop down.
C) From the Reference Set Management screen, select "create reference set from Log Source Event". Pick the Log Source from the drop down. Pick the Event Name from the drop down.
D) Create a Custom Event Property to parse the second IP in the payload. From the Log Source config for the above event, choose "add to reference set" and select your reference set.
3. Which operating system is supported for creating a bootable flash drive for recovery?
A) Cisco IOS
B) Florida Linux
C) RedHat Linux
D) Debian Linux
4. A QRadar administrator is sizing a distributed deployment. The deployment has approximately 2 million flows per minute (FPM) and needs at least 7 terabytes of storage.
Which architecture is correct?
A) One 1724 flow processor
B) Two 1705 flow processors
C) One 1705 flow processor
D) Two 1724 flow processors
5. Which two proxy options are required to be set when using a Proxy Server for Auto Updates inQRadar? (Choose two.)
A) Proxy Server URL
B) Proxy Name
C) Proxy Port number
D) Proxy Schedule
E) Proxy Type
Solutions:
| Question # 1 Answer: B | Question # 2 Answer: D | Question # 3 Answer: C | Question # 4 Answer: D | Question # 5 Answer: A,B |
832 Customer Reviews
Quality and ValueITCertKing Practice Exams are written to the highest standards of technical accuracy, using only certified subject matter experts and published authors for development - no all study materials.
Tested and ApprovedWe are committed to the process of vendor and third party approvals. We believe professionals and executives alike deserve the confidence of quality coverage these authorizations provide.
Easy to PassIf you prepare for the exams using our ITCertKing testing engine, It is easy to succeed for all certifications in the first attempt. You don't have to deal with all dumps or any free torrent / rapidshare all stuff.
Try Before BuyITCertKing offers free demo of each product. You can check out the interface, question quality and usability of our practice exams before you decide to buy.
