nerdexam
IBM

C1000-163 · Question #99

There are frequent network interruptions from a particular network zone called "Underground" to the network where QRadar components are installed. Some important applications, though not time…

The correct answer is D. Using Disconnected Log Collector configured with TLS. See the full explanation below for the reasoning.

Question

There are frequent network interruptions from a particular network zone called "Underground" to the network where QRadar components are installed. Some important applications, though not time critical, are running in the "Underground" network zone. The log data from these applications needs to be sent to QRadar Event Processor for compliance. How can QRadar receive the logs from the applications in the "Underground" network zone?

Options

  • AUsing an App Host
  • BInstalling an Event Processor secondary node in the "Underground" network
  • CUsing Data Node installed in the "Underground" network
  • DUsing Disconnected Log Collector configured with TLS

How the community answered

(38 responses)
  • A
    5% (2)
  • B
    5% (2)
  • C
    18% (7)
  • D
    71% (27)

Community Discussion

No community discussion yet for this question.

Full C1000-163 Practice