1.
Which search parameter in the Log Activity tab must be used to filter events by activity (e.g. SSH Login Succeeded)?
2.
Where would a user look to see the entire payload of an event?
3.
Which tab displays correlated security alerts in IBM Security QRadar V7.0 MR4?
4.
How can a user quickly reload the default filter in their current tab?
5.
How is an asset's weight used?
6.
What is the main difference between a QFlow record versus a netflow capable router or switch?
7.
A user is complaining about slow traffic on a specific network segment, and an administrator has been asked to investigate the source of the congestion using an IBM Security QRadar V7.0 MR4 (QRadar) Dashboard workspace named Top Applications.
From the Top Applications dashboard workspace, which tab is displayed when View Details is clicked?
8.
When working with rules, why do some rules specify QID values and some specify events?
9.
How is the real time streaming of payloads for events viewed?
10.
What action must be taken to view reports related to PCI specifically?