IBM Security QRadar V7.0 MR4 Fundamentals Set 1

1.

How would a user navigate to the Help menu in the IBM Security QRadar V7.0 MR4 (QRadar) interface?

Press Ctrl+H Right-click on Item > Help Help > QRadar Help Content Select from the Action drop-down list

2.

Which statement about log source identifiers is true for the same log source identifier to be used more than once?

It must always be unique. It must be unique amongst the same protocol. It must be unique amongst the same log source group. It must be unique amongst log sources of the same type

3.

What is an Offense Type?

The offense response A scoring priority of Set by Event The destination of the e-mail notification sent The index option chosen in the rule that created the offense

4.

Which statement is most accurate regarding the information that NetFlow provides?

The start time of the conversation, the source and destination IP address, and the total bytes transferred. The start time and the duration of the conversation, application ID, the source and the destination IPaddress. The start time and duration of the conversation, the source and destination IP address, payloadinformation, and the IP port number the data was sent to and received over. The start time and duration of the conversation, the source and destination IP address, the IP portnumber the data was sent to and received over, and the total bytes transferred.

5.

How can a user quickly add a filter?

Actions > Add Filter Click the Add Filter menu icon Search > Edit Search, and add the filter Right-click the column header > Add Filter

6.

In the default Log Activity screen the right-click > False Positive menu is available in which column?

In every column In every column header In every column except time In only the source and destination IP addresses columns

7.

If an IBM Security QRadar V7.0 MR4 operator wants to detect a specific data string in the flow content, which search parameter should be used as a filter?

Source IP Event Name Remote Network Source Payload Contains

8.

Which colored icon must be selected in the chart to change the chart type when viewing a grouped search?

The red X The green star The yellow gear The blue question mark (?)

9.

Where would a user set a searched view as the default view?

Under Save Criteria Under the Admin tab Select the View drop-down list Select Default under the Actions menu

10.

What effect does the Offense Retention period have on closed offenses and who can modify this period?

The Offense Retention period determines how long a closed offense will be kept in the database before it is deleted. The only person who can modify this period is an IBM Security QRadar V7.0 MR4

(QRadar) admin. Once an offense is closed, any other QRadar user will be able to open it again for the time given by theOffense Retention period. The person who closes an offense is also the person who determines the

offense retention period of the closed offense. The offense retention period has no effect on closed offenses. A closed offense is the same as adeleted offense, and offenses that are deleted do not have a retention time. Only QRadar admins can

change the offense retention period because it is found in the Admin tab. The offense retention period has no effect on the closed offenses but only on offenses underevaluation. While the QRadar magistrate evaluates and correlates offenses, it may rely on the life span

of an offense. Everyone who can create QRadar rules can modify the offense retention period.

IBM Security QRadar V7.0 MR4 Fundamentals Set 1

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Congratulations

COMPANY

Products

OTHERS

Partner

IBM Security QRadar V7.0 MR4 Fundamentals Set 1

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Congratulations

Detail Form

COMPANY

Products

OTHERS

Partner