C1000-163試験無料問題集（182題）「IBM Security QRadar SIEM V7.5 Deployment 認定」

出題：1

Consider this scenario and instruction.
Vulnerability assessment products launch attacks that can result in offense creation. To avoid this behavior and define vulnerability assessment products or any server that you want to ignore as a source, edit the "and when the source IP is one of the following" test to include the IP addresses of the following scanners.
- VA Scanners
- Authorized Scanners
What type of editable building block is described?

A. BB:HostDefinition: Proxy Servers

B. BB:HostDefinition: VA Scanner Source IP

C. BB:NetworkDefinition: Server Networks

D. BB:HostDefinition: Authorized ScannersSource IP

正解：C 解答を投票する

出題：2

If you face problems with HA, what folder do you look in to figure out?

A. /opt/qradar/ha

B. /opt/qradar/config/ha

C. /opt/qradar/bin

D. /opt/qradar/bin/ha

正解：A 解答を投票する

出題：3

Where can Building Blocks be updated in QRadar?

A. The Network Hierarchy icon on the QRadar Admin Console

B. The Assets tab, under Network Objects

C. The Pulse app

D. The Tuning Interface in the Use Case Manager app

正解：D 解答を投票する

出題：4

Where are audit logs located?

A. /opt/var/log/audit

B. /var/log/audit

C. /opt/audit/logs

D. /var/audit

正解：B 解答を投票する

出題：5

Which port is required to ensure that the HA nodes are still active?

A. 10101

B. 1000

C. 12500

D. 10102

正解：A,D 解答を投票する

出題：6

What is the minimum bandwidth required between the primary and the secondary nodes of a HA cluster?

A. 10 Gbps

B. 1 Mbps

C. 100 Mbps

D. 1 Gbps

正解：D 解答を投票する

出題：7

From which tabs can a QRadar custom rule be created?

A. Offenses or Admin tabs

B. Offenses, Log Activity or Network Activity tabs

C. Log Activity or Network Activity tabs

D. Offenses or Log Activity tabs

正解：B 解答を投票する

出題：8

A new Console will be built on new hardware, to replace a Console on old hardware. No managed hosts will be migrated to the new hardware. The new Console will have a different IP address than the old Console.
What must be done on the managed hosts before a full deploy is done on the new Console?

A. Run systemctl stop hostcontext, run the full deploy on the new Console, then run systemctl start hostcontext on the managed hosts.

B. Run a reboot to restart the managed hosts and to remove them from the old Console.

C. Run systemctl stop iptables so the new Console can connect to the managed hosts.

D. If the old Console is shutdown, and has its network cable removed, nothing needs to be done on the managed hosts.

正解：C 解答を投票する

出題：9

A deployment professional needs to troubleshoot a QRadar application that is not working.
Which tool can be used to aid the troubleshooting of containers and container management on the QRadar Console or App Host?

A. q_trev.sh

B. qdocker ps

C. qapp_debug.sh

D. recon

正解：D 解答を投票する

出題：10

Which statement about the Extensions Management tool in QRadar is true?

A. CSV extensions can be imported into QRadar.

B. The Extensions Management tool can be used to add a log source.

C. The Extensions Management tool cannot be used to export content out of QRadar.

D. QRadar can be updated by using the Extensions Management tool.

正解：C 解答を投票する

出題：11

What must be created before the Use Case Manager app can be used?

A. User roles

B. Authorized Service Token

C. Security Profile

D. Custom DSM

正解：D 解答を投票する

出題：12

What is the Export Licenses function used for?

A. Changing license allocation in a .xml file.

B. Adding additional hosts to deployment.

C. Moving licenses to another system.

D. Viewing detailed information about license keys.

正解：D 解答を投票する

C1000-163試験無料問題集「IBM Security QRadar SIEM V7.5 Deployment 認定」