IBM IBM Certified Associate A2150-195 Questions & Answers

• Question 71:

  What are the three common fields on the Asset tab > VA Scan section? (Choose three.)

  A. Potts

  B. Status

  C. Host Name

  D. Asset Name

  E. MAC Address

  F. Next Run Time

  Correct Answer: ABF

• Question 72:

  For any Dashboard workspace, which two methods can be used to zoom into any of the spikes in traffic? (Choose two.)

  A. Right-click on the peak of the spike

  B. Double left-click on the peak of the spike

  C. Hold the Shift key, left-click the mouse, drag to the right past the spike, and release the mouse button

  D. Hold the Ctrl key. right-click the mouse, drag to the right past the spike, and release the mouse button

  E. Hold the Shift key, right-click the mouse, drag to the right past the spike, and release the mouse button

  Correct Answer: BC

• Question 73:

  What must be done in order to save a search criteria as a quick search?

  A. Select Save Criteria and select My Dashboard

  B. Select Save Criteria in the New/Edit Search dialog

  C. Right-click on the filter and select Save as Quick Search

  D. Select Save Criteria and select Include in my Quick Searches

  Correct Answer: D

• Question 74:

  Which regex should be used to capture only the domain name blackbox.computerfor all future machine names based on this example?

  `Computer=3 8 9.blackbox.computer'

  A. Computer= (. *?) \s

  B. Computer=389. (.*?)\s

  C. Computer=(389\..*?)\s

  D. Computer=. *?\. (.*?)\s

  Correct Answer: D

• Question 75:

  Where would a user set a searched view as the default view?

  A. Under Save Criteria

  B. Under the Admin tab

  C. Select the View drop-down list

  D. Select Default under the Actions menu

  Correct Answer: A

• Question 76:

  What effect does the Offense Retention period have on closed offenses and who can modify this period?

  A. The Offense Retention period determines how long a closed offense will be kept in the database before it is deleted. The only person who can modify this period is an IBM Security QRadar V7.0 MR4 (QRadar) admin.

  B. Once an offense is closed, any other QRadar user will be able to open it again for the time given by the Offense Retention period. The person who closes an offense is also the person who determines the offense retention period of the closed offense.

  C. The offense retention period has no effect on closed offenses. A closed offense is the same as a deleted offense, and offenses that are deleted do not have a retention time. Only QRadar admins can change the offense retention period because it is found in the Admin tab.

  D. The offense retention period has no effect on the closed offenses but only on offenses under evaluation. While the QRadar magistrate evaluates and correlates offenses, it may rely on the life span of an offense. Everyone who can create QRadar rules can modify the offense retention period.

  Correct Answer: A

• Question 77:

  Which colored icon must be selected in the chart to change the chart type when viewing a grouped search?

  A. The red X

  B. The green star

  C. The yellow gear

  D. The blue question mark (?)

  Correct Answer: C

• Question 78:

  In the default Log Activity screen the right-click > False Positive menu is available in which column?

  A. In every column

  B. In every column header

  C. In every column except time

  D. In only the source and destination IP addresses columns

  Correct Answer: C

• Question 79:

  If an IBM Security QRadar V7.0 MR4 operator wants to detect a specific data string in the flow content, which search parameter should be used as a filter?

  A. Source IP

  B. Event Name

  C. Remote Network

  D. Source Payload Contains

  Correct Answer: D

• Question 80:

  What are two IT Security Frameworks? (Choose two.)

  A. ITIL

  B. SLA

  C. COBIT

  D. ISO 27001

  E. Common Criteria

  Correct Answer: CD