C2150-196 Exam Questions

Which three pieces of information must be supplied to properly set up a system user? (Choose three.)

What does using the Integrated Management Module of the IBM Security QRadar SEM V7.1 (QRadar) appliance allow a user to do?

Which family of analysis methods are commonly used with a time series?

What must be done to capture a new name/value pair for a rule that is not parsed as part of a regular Device Support Module?

Which two network setting parameters are optional? (Choose two.)

Prior to installing IBM Security QRadar SIEM V7.1 on customer provided hardware, Red Hat Enterprise Linux must be installed. SELinux must be set to which option?

What are three default charting options available within the Report wizard? (Choose three.)

Whatis the purpose of the offense index?

Which statement is true about the IBM Security QRadar SIEM (QRadar) Network Hierarchy?

From the Admin tab > System and License Management icon, what must be done to install and deploy an IBM Security QRadar SIEMV7.1 license for a set of newly installed hosts?

What does the command qchange_netsetup do?

Which tuning template is available in IBM Security QRadar SIEM V7.1?

What must be done to calculate EPS from the IBM Security QRadar SIEM V7.1 Web interface?

Which statement best describe the data migration process available in IBM Security QRadar SIEM V7.1 (QRadar)?

If an IBM Security QRadar 1790 virtual appliance is added to a configuration, which capability becomes available?

How is a new UDSM device created?

What is a purpose of a rule action?

Which method does WinCollect use to collect Windows 2008 events?

Which statement best describes the expected increase in forensic capabilities when IBM Security QRadar QFlow (QRadar QFlow) is implemented?

After configuring external authentication, which user can still log in to the Web interface if this external resource is not available?

Which action can IBM Security QRadar SIEM V7.1 automatically perform on referencesets?

What can IBM Security QRadar SIEM V7.1 be configured to back up in the Backup and Recovery Wizard?

A QID can belong to how many categories?

What is required toconnect a WinCollect agent to IBM Security QRadar SIEM V7.1?

What does the IP Right Click Menu Extensions plug-in do in IBM SecurityQRadar SIEM V7.1?

How is a Universal DSM configured to collect different data types from various log sources?

Where are firewall event details located using the IBM Security QRadar SIEM V7.1 interface?

Which group of tests is used to test the sequence of rulesthat have been triggered by events or flows?

What are two ways asymmetric flow support can be enabled? (Choose two.)

Categorizing log sources into groups allows clients to efficiently view and track log sources. Which statement best characterize Log Source groups?

Which component processes events against defined custom rules?

Which scenario best describes the actions that take place during a restore?

What is the default setting for Major Updates in Auto Updates > Change Settings > Update Types?

What does the % of Searches Using Property column in the Index Management Page indicate?

When adding a new IBM Security QRadar SIEM managed host, the password is required for which user?

What is the benefit of using server discovery?

A user can be assigned which two permissions? (Choose two.)

Which Admin setting allows the monitoring of system load over 15 minutes?

What are two IT Security Frameworks? (Choose two.)

Where would a user set a searched view as the default view?

Which search parameter in the Log Activity tab must be used to filter events by activity (e.g. SSH Login Succeeded)?

How is an asset's weight used?

Given a multi-host deployment, where are data backups for managed hosts stored?

What is the result of modifying a saved search?

To overwrite an IBM Security QRadar SIEM V7.1 system, what must be typed in when prompted during the re-imaging process?

Where does IBM SecurityQRadar SIEM V7.1 get the severity of an event?

IBM Security QRadar SIEM V7.1 can be forced to run an instant backup by selecting which option?

An IBM Security QRadar SIEM V7.1 (QRadar) ALE agent should be installed on which system to collect Windows logs?

Which statement best describes the supported external storage options in IBM Security QRadar SIEM V7.1(QRadar)?

By default how often are events forwarded from an event collector to an event processor?