IBM Security QRadar SIEM V7.5 Deployment - C1000-163 Exam Practice Test
Which type of information is considered as identity data for QRadar Assets?
Correct Answer: C
Vote an answer
What is used to extract fields, define custom properties, categorize events, and define new QID definitions?
Correct Answer: D
Vote an answer
While reviewing the performance of a QRadar distributed environment, you notice an abnormal number of events that were generated in the past 24 hours:
38750088 - Performance degradation has been detected in the event pipeline. Event(s) were routed directly to storage.
As a deployment professional, you ensure that your events per second (EPS) license is adequate and verify that no changes to rules or custom properties were made in the past week.
Which of these issues can cause QRadar to generate performance degradation events?
38750088 - Performance degradation has been detected in the event pipeline. Event(s) were routed directly to storage.
As a deployment professional, you ensure that your events per second (EPS) license is adequate and verify that no changes to rules or custom properties were made in the past week.
Which of these issues can cause QRadar to generate performance degradation events?
Correct Answer: A
Vote an answer
There are 10 retention buckets in Qradar SIEM. The default is placed in the last line with retention policy of 30 days. Action is set to delete the data immediately after retention period has expired. Admin creates another policy on top of the default policy to keep firewall data for 10 days.
What will happen to the data after 30 days?
What will happen to the data after 30 days?
Correct Answer: C
Vote an answer
If you face problems with HA, what folder do you look in to figure out?
Correct Answer: A
Vote an answer
Which additional license is required to use the Am I Affected scan in the IBM Security QRadar Threat Intelligence app?
Correct Answer: C
Vote an answer
When multiple repositories are configured for authentication, what must a user do when they log in?
Correct Answer: B
Vote an answer
What file format is supported to perform a bulk load of data into a reference set?
Correct Answer: C
Vote an answer
An administrator needs to add, delete and modify user accounts.
When deleting a user, what dependency checks are carried out?
When deleting a user, what dependency checks are carried out?
Correct Answer: D
Vote an answer
Which utility is used for checking the integrity of event and flow logs?
Correct Answer: C
Vote an answer
Which tool can be used to check the connections to all managed hosts and verify the versions of ECS and ECS-Ingress services after an upgrade?
Correct Answer: A
Vote an answer
For a Source IP based offense, which field helps determine relative importance of the targets to the business?
Correct Answer: A
Vote an answer