IBM C1000-156 IBM Security QRadar SIEM V7.5 Administration Exam Practice Test Questions

• Question 1

  On which managed hosts is QRadar event data stored in the Ariel database?

  • On the Event Collector and attached Data Node
  • On the Data Gateway and attached Data Node
  • On the Event Processor and attached Data Node
  • On the App Host and attached Data Node

  Show Answer Answer: C Next

• Question 2

  Which is a valid statement about the process of restoring a backup archive?

  • A configuration restore must be performed on a console where the IP address matches the IP address of a managed host in the backup.
  • A backup archive can only be restored for the same software version, including fix pack versions.
  • When restoring all configuration items included in the backup archive, only configuration information, offense data, and asset data are restored.
  • A restoration might fail if you restore the configuration backup before the data backup.

  Show Answer Answer: B Next

• Question 3

  What is the main reason for tuning a building block?

  • Increasing the performance of the ecs-ec-ingress service
  • Reducing the number of false positives
  • Properly documenting the building block for future administrators
  • Reducing EPS usage

  Show Answer Answer: B Next

• Question 4

  From which two (2) resources can an administrator download QRadar security content?

  • QRadar Application Repository
  • IBM Applications Database
  • IBM Fix Central
  • IBM App Central
  • IBM Security App Exchange

  Show Answer Answer: A, ,E Next

• Question 5

  Which profile database does the Server Discovery function use to discover several types of servers on a network?

  • Flow profile database
  • Network profile database
  • Domain profile database
  • Asset profile database

  Show Answer Answer: D Next