IBM Security QRadar SIEM V7.2.6 Associate Analyst - C2150-612 Exam Practice Test

A. Reports and Owner

B. Reports and Report Grouping

C. Reports and Scheduled Reports

D. Reports and Branding

A. Messages menu

B. Offense Tab

C. Dashboard tab

D. Report Tab

A. QRadar Flow Processor

B. QRadar Event Collector

C. QRadar Data Node

D. Qradar Event Processor

A. System Monitoring

B. Threat and Security Monitoring

C. Vulnerability Management

D. Network Overview

A. Right click on the IP > Information > Asset Profile

B. Right click on the IP > Information > DNS Lookup

C. Right click on the IP > Information > WHOIS Lookup

D. Right click on the IP > Information > Reverse DNS

A. Apply "Potential data loss" on event of flows which are detected by the local system and when any IP is part of any of the following XForce premium Premium_Malware

B. Apply "Potential data loss" on events which are detected by the local system and when the event category for the event is one of the following Authentication and when any of Username are contained in any of Terminated_User

C. Apply "Potential data loss" on flows which are detected by the local system and when the source bytes is greater than 200000 and when at least 5 flows are seen with the same Source IP, Destination Port Destination IP in 12 minutes

D. Apply "Potential data loss" on flows which are detected by the local system and when at least 1000 flows are seen with the same Destination IP and different source in 2 minutes

A. Port 443

B. Port 80

C. Port 22

D. Port 53

A. It can be labeled for later use.

B. Scheduling is available.

C. A report can be assigned to specific users.

D. It can be added as a dashboard item.