What is the minimum disk size for a QRadar virtual appliance installation?

Question

Options

• A128 GB
• B256 GB
• C512 GB
• D1024 GB

• A
  5% (1)
• B
  81% (17)
• C
  5% (1)
• D
  10% (2)

Explanation

IBM QRadar virtual appliance deployments require a minimum of 256 GB of disk space to support its data storage, event processing, and logging infrastructure. This threshold ensures the system can handle baseline SIEM operations including flow data, event logs, and the QRadar software stack itself.

Why the distractors are wrong:

• A (128 GB) is too small - QRadar's data retention and processing demands exceed what 128 GB can reliably support even at minimal scale.
• C (512 GB) and D (1024 GB) are valid recommended or production-scale sizes, but they exceed the minimum requirement; confusing "recommended" with "minimum" is the common trap here.

Memory tip: Think "256 = minimum viable SIEM" - QRadar needs at least a quarter-terabyte to get off the ground. If you remember that 128 GB is a common minimum for general-purpose VMs, QRadar doubles that floor due to its security data volume needs.

No community discussion yet for this question.