C1000-163 · Question #148
Which service is responsible for adding new assets in Qradar?
The correct answer is A. Asset Profiler. Asset Profiler (A) is the QRadar service responsible for discovering and adding new assets to the asset database. It passively monitors network traffic and event data to identify devices, automatically creating and updating asset profiles based on observed activity. ecs-ep (B)…
Question
Which service is responsible for adding new assets in Qradar?
Options
- AAsset Profiler
- Becs-ep
- Cecs-ec
- DVulnerability Information Server
How the community answered
(41 responses)- A71% (29)
- B15% (6)
- C10% (4)
- D5% (2)
Explanation
Asset Profiler (A) is the QRadar service responsible for discovering and adding new assets to the asset database. It passively monitors network traffic and event data to identify devices, automatically creating and updating asset profiles based on observed activity.
ecs-ep (B) and ecs-ec (C) are QRadar Event Collection Services - ecs-ep handles event pipeline processing and ecs-ec handles event collection from log sources. Neither interacts with the asset database directly.
Vulnerability Information Server (D) enriches existing asset profiles with vulnerability scan data from tools like Nessus or Qualys - it updates assets, but does not create them.
Memory tip: Think "AP = Asset Producer" - Asset Profiler produces (adds) new asset entries, while the Vulnerability Information Server only enhances what's already there.
Community Discussion
No community discussion yet for this question.