C1000-026 Exam Questions
70 real C1000-026 exam questions with expert-verified answers and explanations. Page 2 of 2.
- Question #51System Administration and Configuration
An administrator wants to upload a file with information related to network hierarchy instead of using the GUI wizard. How can the administrator do this?
network hierarchyREST APIfile uploadconfiguration management - Question #52System Administration and Configuration
What should an administrator do to successfully upgrade an IBM Security QRadar system from an older version?
upgrade pathhardware requirementsHA requirementspre-upgrade checklist - Question #53System Administration and Configuration
An administrator has reviewed the list of new features in the QRadar V7.3.2 release notes, and decides to upgrade their system to this version. What is the minimum supported versio...
minimum upgrade versionQRadar 7.3.2version compatibilityupgrade path - Question #54System Administration and Configuration
The auto update frequency can be set to occur on which two intervals? (Choose two.)
auto updateupdate frequencyschedulingmaintenance - Question #55System Administration and Configuration
What is the correct location for configuring backups?
backup configurationbackup and recoveryAdmin pagedata backup - Question #56System Administration and Configuration
Which connection type to the console is required to run qchange_netsetup?
qchange_netsetupconsole connectionlocal accessnetwork configuration - Question #57Offense Management and Troubleshooting
A QRadar user reported the following notification: 38750099 - The accumulator was unable to aggregate all events/flows for this interval When does this message appear?
accumulator errorevent aggregationflow aggregationsystem notification - Question #58System Administration and Configuration
An administrator has been asked to configure a new QRadar console high availability (HA) deployment. Both the primary and secondary consoles have been installed with the QRadar sof...
high availabilityHA configurationconsole deploymentsecondary host - Question #59Rule and Report Management
A custom rule is generating events reporting that a specific user is failing to login too many times in the last 5 minutes. The administrator opens the event details to investigate...
anomaly detection rulecustom rule typesevent investigationbehavioral detection - Question #60Offense Management and Troubleshooting
An administrator may be asked to collect diagnostic information on one of our main services. For example, ecs-ec. Commands such as: /opt/qradar/support/thredtop.sh /opt/qradar/supp...
JMX portsdiagnostic commandsecs-ec servicethread monitoring - Question #61Rule and Report Management
Which event QID test is used to send an email as a rule response when disk usage reaches a threshold?
rule responsedisk usage thresholdQIDemail notification - Question #62QRadar SIEM Architecture and Components
Which app should be used for monitoring QRadar performance and health?
QRadar Deployment Intelligenceperformance monitoringhealth monitoringQRadar apps - Question #63System Administration and Configuration
An administrator modified a configuration setting in the Global System Notifications using the QRadar Console Admin tab. What is the last step to apply changes?
Deploy ChangesAdmin tabGlobal System Notificationsconfiguration workflow - Question #64System Administration and Configuration
An administrator wants to have all QRadar apps running on a new App Host that was configured to have dedicated CPU, storage and memory resources for the Apps. Several issues were p...
App Hostport 5000installation troubleshootingnetwork connectivity - Question #65System Administration and Configuration
What is a reason for restarting hostcontext service in QRadar?
hostcontext serviceservice restartdeploy requestsQRadar services - Question #66QRadar SIEM Architecture and Components
Which of the following dashboards is a QRadar default Dashboard?
default dashboardThreat and Security MonitoringQRadar UIdashboards - Question #67Log Source and Network Activity Configuration
An administrator needs to combine multiple extraction and calculation-based properties into a single property. Which Ariel Query Language (AQL) statement can be used?
AQLcustom propertiesAriel Query Languagedata extraction - Question #68Offense Management and Troubleshooting
After fixing the assets that contributed to the asset growth deviation, an administrator needs to find the asset artifacts that have to be cleaned up. What action should the admini...
asset growth deviationasset cleanupLog Activity searchasset management - Question #69System Administration and Configuration
An administrator has been tasked to run all health checks at once using the DrQ command before a major event happens, such as an upgrade. What does the DrQ command do?
DrQ commandhealth checksdiagnostiqpre-upgrade diagnostics - Question #70QRadar SIEM Architecture and Components
Which IBM monitoring application can be used to see detailed health and status information at the application, middleware, and system level?
QRadar Deployment Intelligencehealth monitoringmiddlewaresystem-level monitoring