IBM IBM Certified Deployment Professional C2150-400 Questions & Answers

• Question 91:

  What does monitoring offenses grouped by category provide?

  A. A list of offenses grouped on the user category

  B. A list of offenses grouped on the low-level category

  C. A list of offenses grouped on the high-level category

  D. A list of offenses grouped on the event or flow category

  Correct Answer: C

• Question 92:

  Which Log Source Type should be used to add a Log Source with Log Source Extension?

  A. Any

  B. Custom

  C. Universal DSM

  D. Log Source Extension

  Correct Answer: D

• Question 93:

  Which option is used to set the Secondary host to an active state?

  A. Click on Primary, then click on High Availability > Set System Offline

  B. Click on Secondary, then click on High Availability > Restore System

  C. Click on Secondary, then click on High Availability > Set System Online

  D. Click on HA Cluster, then click on High Availability > Set System Offline

  Correct Answer: C

• Question 94:

  Where does the information about total number of Assets and Vulnerability processed appear?

  A. Asset table in Assets tab

  B. VA Scanner Configuration screen

  C. Vulnerabilities Tab > Scan Result

  D. Mouse Ober popup on Schedule Scan Status field

  Correct Answer: C

• Question 95:

  Which user account in the QRadar host must be used to configure offboard storage?

  A. Root

  B. Admin

  C. Storage

  D. Administrator

  Correct Answer: A

• Question 96:

  What indicates if an offense is flagged for follow-up?

  A. A flag in the Flag column

  B. Follow-up System Notification

  C. Follow-up email notification from that offense

  D. A flag in Offense Note indicating follow-up required

  Correct Answer: D

• Question 97:

  A customer is getting sufficient detection of proxy servers and customer wants to tune the building block "Default--BB-Host-Definition: Proxy Servers".

  Which test the "Default-BB-Host Definition: Proxy Servers" need to be edited for tuning?

  A. Edit the "and when the destination IP is one of the following" test to include the IP addresses

  B. Edit the "and when the source or destination network is one of the following" test to include the network

  C. Edit the "and when the source IP is one of the following" test to include the IP addresses of the proxy servers

  D. Edit the "and when either the source or destination IP is one of the following" test to include the IP addresses of the proxy servers

  Correct Answer: C

• Question 98:

  What options on the Reports tab allows you to import logos and specific images for use on reports?

  A. Design

  B. Images

  C. Branding

  D. Customization

  Correct Answer: C

• Question 99:

  What is the command to mount the Patch file 721_QRadar_patchupdate-7.2.1.679924.sfs in QRadar 7.2.1?

  A. mount -o loop /media/updates 721_QRadar_patchupdate-7.2.1.679924.sfs

  B. mount -o squashfs -t loop 721_QRadar_patchupdate-7.2.1.679924.sfs /media/updates

  C. mount -o loop /media/updates -t squashfs 721_QRadar_patchupdate-7.2.1.67924.sfs

  D. mount -o loop -t squashfs 721_QRadar_patchupdate-7.2.1.679924.sfs /media/updates/

  Correct Answer: D

• Question 100:

  What is used to define the server types in the server discovery screen?

  A. Ports

  B. Hostname

  C. Mac address

  D. IP addresses

  Correct Answer: A