IBM C1000-140 Exam Practice Test Instant Access

Question 1

For tenant data retention, what is the maximum number of buckets for shared data that can be created per tenant?

B10

CNo limit

D20

Answer : C

Question 2

Which of these statements is true about network objects?

AA network object can have multiple CIDR ranges assigned to it.

BA network object must have at least one CIDR range per QRadar domain.

CA network object represents a single asset that is connected to a network.

DA network object is a group of assets that are connected to a network.

Answer : C

Question 3

What approach does QRadar take when it imposes EPS license (not hardware) limits on events that temporarily spike above that limit?

AExcessive events in a spike cause a System Notification that advises the customer to increase their EPS license allocation.

BQRadar EPS license allocation is implemented with a hard cutoff to ensure resources are not saturated.

CDuring the spike, excess events are written to a queue, and they are processed after the EPS rate drops.

DQRadar EPS licensing is measured as an average over a 24-hour period, which allows spikes to be handled gracefully.

Answer : D

Question 4

Which statement is valid about the SAML authentication feature?

AUsers enter local credentials every time they access QRadar.

BYou cannot use the x509 certificate, only the provided QRadar_SAML certificate.

CYou can integrate QRadar with your corporate identity server to provide single sign-on.

DAuthentication is exchanged by using digitally signed HTML documents.

Answer : C

Question 5

For tenant data retention, what is the maximum number of buckets for shared data that can be created per tenant?

B10

CNo limit

D20

Answer : B

Question 6

Which component processes unallocated syslog messages, identifies the DSMs that are installed on the system, and then assigns the appropriate log source type to a new log source?

ATraffic analysis

BAutodetect traffic

CDSM discovery analysis

DDiscovery analysis

Answer : A

https://www.ibm.com/support/pages/qradar-understanding-traffic-analysis-and-log-source-auto-detection

Question 7

A QRadar deployment professional needs to add a managed host to help reduce the load on the QRadar Console.

The managed host should have local storage and also use the QRadar Custom Rule Engine.

Which managed host does the deployment professional add?

AEvent Collector

BApp Host

CDisconnected Log Collector

DEvent Processor

Answer : D

IBM Security QRadar SIEM V7.4.3 Deployment C1000-140 Exam Practice Test