IBM Technical Sales Foundations for IBM Security Intelligence and Analytics V1 - P2150-870 Exam Practice Test

A. providing health monitoring and system management of the QRadar Deployment during normal business hours only.

B. providing 24 hours. 7 days a week health monitoring and system management of the QRadar Deployment.

C. generating new use cases.

D. alerting the user regarding offenses.

A. OSI Layer 7 packet from OSI Layer 3 flow information.

B. A demilitarized zone from Apple Airport data.

C. An Offense from Events.

D. IPFIX records with deep security content from SPAN or TAN port data.

A. one or more QRadar Event Collector appliances.

B. one or more QRadar Network Packet Capture appliances

C. one or more QRadar Vulnerability Scanner appliances

D. one or more QRadar QFlow Collector appliances.

A. Rules can be used for reporting and Building Blocks cannot.

B. Building Blocks have responses and Rules do not.

C. Building Blocks only use flows and Rules only use events.

D. Rules have responses and Building Blocks do not.