IBM IBM Certified Associate A2150-195 Questions & Answers

• Question 41:

  A flow is a sequence of packets that have which common characteristics?

  A. Same source, MAC address, flow source and destination IP address

  B. Same source IP address, flow source and transport layer port information

  C. Same source and destination IP address and transport layer port information

  D. Same destination IP address, source bytes and transport layer port information

  Correct Answer: C

• Question 42:

  Which protocol can be used to send reports?

  A. FTP

  B. SMTP

  C. SNMP

  D. Syslog

  Correct Answer: B

• Question 43:

  If a user wants to assign an incident to a particular user, which drop-down list would they select inside the Offense interface?

  A. Display

  B. Actions

  C. Incident

  D. Question Mark

  Correct Answer: B

• Question 44:

  What is an example of a correctly written single character wild card search term using the Quick Filter?

  A. Firewall

  B. F(?)rewall

  C. "F"(?)"rewall"

  D. "FT ?)"rewall"

  Correct Answer: A

• Question 45:

  How can a user cancel a running report in IBM Security QRadar V7.0 MR4?

  A. A running report cannot be canceled

  B. Select the report > Actions > Cancel Report

  C. Right-click on the report > select Cancel Report

  D. Look at the report queue, select the report to be canceled, select Delete

  Correct Answer: A

• Question 46:

  Which two formats can a user export flow data from the Network Activity tab? (Choose two.)

  A. RTF

  B. XML

  C. PDF

  D. CSV

  E. HTML

  Correct Answer: BD

• Question 47:

  A flow is always based on what?

  A. unicast and any cast traffic

  B. unicast and broadcast traffic

  C. unicast. multicast, and anycast traffic

  D. unicast, broadcast, and multicast traffic

  Correct Answer: C

• Question 48:

  In the Offense Summary page, which field indicates if an attack was sudden or if the attack occurred over a long period of time?

  A. Duration

  B. Total Time

  C. Attack Length

  D. Offense Period

  Correct Answer: A

• Question 49:

  What are two ways that asset profiles can be populated? (Choose two.)

  A. Flow data

  B. Heartbeat traffic

  C. Router configuration

  D. Windows application logs

  E. Vulnerability assessment scans

  Correct Answer: AE

• Question 50:

  Which four fields are used when importing assets from a CSV file?

  A. IP, Name, Weight. Description

  B. IP. Port, MAC Address, Weight

  C. IP, Port. MAC Address. Description

  D. IP, User, Host Name, Service Version

  Correct Answer: A