1.
Which operating system is supported for creating a bootable flash drive for recovery?
2.
Which line color inside the deployment editor signals that encrypted communication has been selected for the managed hosts in a distributed environment?
3.
A QRadar SIEM administrator wants to create a Flow Rule that includes a building block definition (BB) that includes applications that indicate communication with file sharing sites. In which group will the administrator find this specified building block?
4.
Which character is used for naming subgroups when using the option Add Group in the Network Hierarchy editor?
5.
Which expression imports all xml files in the report directory if the administrator is configuring a Nessus Scanner?
6.
Which Permission Precedence should be applied to the users security profile assuming the administrators only want the group to have access to Windows events and flows and not events from other networks?
7.
On the QRadar console you have received notification that CVE ID: CVE-2010-000 is being actively used. What search parameter should you select from the list of search parameters in this situation?
8.
What type of users can view all reports that are created by other users?
9.
What does the message in the System Notification Widget on the Dashboard "Disk sentry: System disk usage back to normal levels." tell you?
10.
A QRadar administrator is sizing a distributed deployment. The deployment has approximately 2 million flows per minute (FPM) and needs at least 7 terabytes of storage. Which architecture is correct?