Exit demo C2150-400 IBM Security Qradar SIEM Implementation v 7.2.1 PDF format · free preview

IBM C2150-400 - Questions & Answers

Free preview · every answer includes a full explanation

Product page: https://prepkeys.com/c2150-400.html

Question 1
Single choice

The following message is displayed in the System Notification Widget on the Dashboard:

Which script should be run to help determine the cause of the dropped events?

A.

/opt/qradar/support/dumpGvData.sh

B.

/opt/qradar/support/dumpDSMInfo.sh

C.

/opt/qradar/support/cleanAssetModel.sh

D.

/opt/qradar/support/findExpensiveCustomRules.sh

Question 2
Single choice

What is used to collect netflow and jflow traffic in a QRadar Distributed Deployment?

A.

QRadar 3105 Console

B.

QRadar 1705 Processor

C.

QRadar 1605 Processor

D.

QRadar 700 Risk Manager

Question 3
Single choice

What should the format of a CSV file be while importing assets on the QRadar console?

A.

ip,portweight,description

B.

ip,name,weightmagnitude

C.

ip.name.weight.description

D.

ip.name.severity.description

Question 4
Single choice

Which option needs to be specified in the syslinux configuration file to reinstall an IBM QRadar appliance via serial port from an USB flash-drive?

A.

USB to serial

B.

Default serial

C.

Serial to USB

D.

serial redirect

Question 5
Single choice

With a Data Deletion Policy of "

When storage is required", data will remain in storage until which scenario is reached?

A.

If used disk space reaches 88% for records and 85% for payloads.

B.

If used disk space reaches 85% for records and 88% for payloads.

C.

If used disk space reaches 85% for records and 83% for payloads.

D.

If used disk space reaches 83% for records and 85% for payloads.

Question 6
Multiple choice

Which two actions can be selected from the license drop-down in the system and license management screen when working with a new license? (Choose two.)

A.

Apply license

B.

Upload license

C.

Allocate license to system

D.

Allocate system to license

E.

Register system to license

Question 7
Single choice

How frequently does the Automated Update Process run if Configuration files are updated on Primary and then Deploy Changes is not performed, and the updates are made on the Secondary host through an Automated Update Process?

A.

Every 10 minutes

B.

Every 15 minutes

C.

Every 30 minutes

D.

Every 60 minutes

Question 8
Multiple choice

What two are valid actions that a user can perform when monitoring offenses? (Choose two.)

A.

Import offenses

B.

Backup offenses

C.

Restore offenses

D.

Send email notifications

E.

Hide or close an offense from any offense list

Question 9
Single choice

What is a valid QVM scan status?

A.

Active

B.

Paused

C.

Scanning

D.

Complete

Question 10
Single choice

Which NetFlow versions does QRadar SIEM support?

A.

1, 2, 3, and 4

B.

1, 4, 7, and 9

C.

1, 3, 5, and 9

D.

1, 5, 7, and 9

Showing 10 of 175 questions · Unlock the full set