IBM IBM Certified Deployment Professional C2150-400 Questions & Answers

• Question 51:

  Which three messages are displayed in the Next Run Time Column while a QRadar Administrator is manually generating a report? (Choose three.)

  A. Generating

  B. (x hour(s) x min(s))

  C. Generating Queues

  D. (x hour(s) x min(s) y sec(s))

  E. Queued (position in the queue)

  F. Queued in the database column

  Correct Answer: BDE

• Question 52:

  What is used to collect security events in a QRadar Distributed Deployment?

  A. QRadar 3124 Console

  B. QRadar 1724 Processor

  C. QRadar 1624 Processor

  D. QRadar 1310 QFlow Collector

  Correct Answer: D

• Question 53:

  Which two proxy options are supported by QRadar Auto Update Advanced settings? (Choose two.)

  A. Proxy Port

  B. Proxy Type

  C. Proxy Name

  D. Proxy Category

  E. Proxy Username

  Correct Answer: DE

• Question 54:

  Which serial option needs to be set in the syslinux configuration file to reinstall a malfunctioning appliance via serial port from an USB flash-drive?

  A. Default serial

  B. Serial port redirect

  C. Serial install option

  D. Serial console redirect

  Correct Answer: A

• Question 55:

  Which two types of charts are available on QRadar SIEM Report editor? (Choose two.)

  A. Top Events

  B. Top Source IPs

  C. Top Login Failures

  D. Top Destination IPs

  E. Top Access Failures

  Correct Answer: BD

• Question 56:

  A QRadar SIEM administrator wants to report when a local system connects to the internet on more than 100 destination ports over a 2 hour period. The administrator created an anomaly rule to capture this scenario.

  Which type of rule should be selected in the rule creation wizard in this situation?

  A. Flow Tule

  B. Event Rule

  C. Offense Rule

  D. Common rule

  Correct Answer: B

• Question 57:

  Which two formats are available for reports generated from the QRadar Reporting Tab? (Choose two.)

  A. TXT

  B. CSV

  C. PDF

  D. HTML

  E. PostScript

  Correct Answer: CD

• Question 58:

  A customer has developed a custom Universal Device Support Module (uDSM's) for an unsupported device. The customer wants to parse Device Time field which is not in standard format.

  Which parameter should an administrator define in the LSX template in this situation?

  A. ext-time

  B. ext-date

  C. ext-data

  D. ext-devicedate

  Correct Answer: C

• Question 59:

  Which feature of QRadar is used for correlation purposes to help reduce false positives?

  A. Flow information

  B. Events information

  C. Asset port information

  D. Asset profile information

  Correct Answer: D

• Question 60:

  Which two ways does QRadar Vulnerability Manager (QVM) provide examine vulnerability data? (Choose two.)

  A. VA Scanner

  B. Scan Results

  C. Custom Event Rules

  D. Manage Vulnerabilities

  E. Audit Logs and Audit Events

  Correct Answer: BC