IBM C1000-140 Exam Practice Test Instant Access

Question 1

What is an approach to tuning a ''noisy'' rule, that is, a rule that generates too many offenses?

ADetermine whether the rule matches too many conditions in the traffic.

BIn the offense output, scroll down and review the ''Excessive'' flags.

CConfirm that the rule is enabled.

DUse the QRadar Pulse app to map noisy offense output.

Answer : A

Question 2

A QRadar deployment professional needs to add a managed host to help reduce the load on the QRadar Console.

The managed host should have local storage and also use the QRadar Custom Rule Engine.

Which managed host does the deployment professional add?

AEvent Collector

BApp Host

CDisconnected Log Collector

DEvent Processor

Answer : D

Question 3

Where is a QRadar license obtained?

AX-Force Exchange/license app

BIBM Sales Representative

CQRadar Console

DIBMcom/qradar/licenses

Answer : B

Question 4

Which statement is valid about the SAML authentication feature?

AUsers enter local credentials every time they access QRadar.

BYou cannot use the x509 certificate, only the provided QRadar_SAML certificate.

CYou can integrate QRadar with your corporate identity server to provide single sign-on.

DAuthentication is exchanged by using digitally signed HTML documents.

Answer : C

Question 5

During an App Host migration, a deployment professional needs to ensure that all the apps are stopped.

Which task will stop the apps from running?

AUse the QRadar API

BUse the Log Activity tab

CReinstall the apps

DGo to each app's configuration

Answer : A

Question 6

What is the network interface requirement for adding a secondary HA node to the primary HA node?

AA crossover connection between the primary and secondary host is needed.

BA crossover connection needs to be configured on all bonded interfaces.

CAll the network interfaces on the primary and secondary host should be bonded.

DThe primary host cannot contain more physical interfaces than the secondary host.

Answer : C

Question 7

Which of these statements is true about network objects?

AA network object can have multiple CIDR ranges assigned to it.

BA network object must have at least one CIDR range per QRadar domain.

CA network object represents a single asset that is connected to a network.

DA network object is a group of assets that are connected to a network.

Answer : C

IBM Security QRadar SIEM V7.4.3 Deployment C1000-140 Exam Practice Test