C1000-163試験無料問題集（182題）「IBM Security QRadar SIEM V7.5 Deployment 認定」

出題：1

Which of the following utilities can be run on Qradar?

A. nc

B. sqlmap

C. psexec

D. nmap

正解：A,D 解答を投票する

出題：2

Which item is an internal flow source?

A. JFLOW/SFLOW

B. Netflow

C. IPFIX

D. QRadar Flow Collector

正解：D 解答を投票する

出題：3

A large multinational corporation is expanding its QRadar deployment to new countries. They decided to implement a geographically distributed deployment.
What may be a benefit of having a processor on site, according to the scenario?

A. Reducing the analyst investigation time, by reducing latency.

B. Improving search speeds due to high-speed network connectivity between the QRadar Console and remote processors.

C. Avoiding latency with searches, especially during multiple concurrent searches.

D. Compliance with local data laws by storing data in the place of origin.

正解：D 解答を投票する

出題：4

What is the default data retention period for a retention bucket?

A. 1 year

B. 7 days

C. 14 days

D. 1 month

正解：D 解答を投票する

出題：5

An analyst needs to preserve the data from a search to view later.
Which option should they select?

A. Save Search

B. Save Criteria

C. Save Results

D. Save Data

正解：C 解答を投票する

出題：6

During an App Host migration, a deployment professional needs to ensure that all the apps are stopped.
Which task will stop the apps from running?

A. Use the QRadar API

B. Use the Log Activity tab

C. Reinstall the apps

D. Go to each app's configuration

正解：A 解答を投票する

出題：7

What is the directory where a backup archive file needs to be placed so that QRadar can automatically import it?

A. /storetmp/imports/backups

B. /storetmp/backups

C. /store/imports/inbound

D. /store/backupHost/inbound

正解：D 解答を投票する

出題：8

Which QRadar app displays time series graphs for queries?

A. Log Management App

B. Assistant for Watson

C. Pulse

D. Threat Intelligence

正解：C 解答を投票する

出題：9

What file format is supported to perform a bulk load of data into a reference set?

A. CSV

B. TAXII

C. XML

D. JSON

正解：A 解答を投票する

出題：10

If you do not have access to the admin account from the user interface, how to change admin password?

A. /opt/qradar/support/changePasswd.sh -a

B. /opt/qradar/bin/changePassword.sh -a

C. /opt/qradar/bin/changePasswd.sh -a

D. /opt/qradar/support/changePassword.sh -a

正解：A 解答を投票する

C1000-163試験無料問題集「IBM Security QRadar SIEM V7.5 Deployment 認定」