nerdexam
IBM

C1000-163 · Question #16

A QRadar deployment professional is asked to migrate the configuration of a system from Log Manager to QRadar SIEM. How should the custom rules, saved searches, and reports be migrated?

The correct answer is D. Use rsync to transfer the contents of the /store partition to the new system. See the full explanation below for the reasoning.

Question

A QRadar deployment professional is asked to migrate the configuration of a system from Log Manager to QRadar SIEM. How should the custom rules, saved searches, and reports be migrated?

Options

  • AUse the QRadar config backup and restore process to transfer all configurations.
  • BUse the content management tool (CMT) to transfer the security configuration.
  • CThe only option is to use the GUI to manually recreate any required content.
  • DUse rsync to transfer the contents of the /store partition to the new system.

How the community answered

(29 responses)
  • A
    10% (3)
  • B
    3% (1)
  • C
    3% (1)
  • D
    83% (24)

Community Discussion

No community discussion yet for this question.

Full C1000-163 Practice