SCSI can be configured in a standard IBM Security Qradar SIEM V7.1 deployment or in a High Availability environment. The initiator name is used to identify the iSCSI device volume where the/store or…

Question

Options

• A/etc/iscsi/initiatorname.iscsi
• B/optliscsi/initiatorname.iscsi
• C/proc/etc/iscsi/initiatorname.iscsi
• D/optlqradar/conf/initiatorname.iscsi

• A
  71% (20)
• B
  4% (1)
• C
  18% (5)
• D
  7% (2)

Explanation

On Linux-based systems (which QRadar runs on), the iSCSI initiator name is stored at /etc/iscsi/initiatorname.iscsi - this is the standard, distribution-agnostic path defined by the open-iSCSI project and used across Red Hat, CentOS, and other enterprise Linux distributions that QRadar is built upon. Option B (/optliscsi/) and D (/optlqradar/conf/) are fabricated paths - QRadar application files live under /opt/qradar/, not these variants, and iSCSI configuration is a Linux OS-level concern, not a QRadar application concern. Option C (/proc/etc/iscsi/) is nonsensical: /proc is a virtual kernel filesystem for runtime process/system data, not a location for persistent configuration files like this one.

Memory tip: Think "iSCSI lives in /etc" - just like most Linux service configuration files (SSH, network, DNS), iSCSI follows the same convention: /etc/<service-name>/<config-file>. If you remember that /etc is where Linux stores system-wide config, you can eliminate all other options immediately.

No community discussion yet for this question.