C1000-156無料問題集「IBM Security QRadar SIEM V7.5 Administration」

質問 1

To detect outliers, which Anomaly Detection Engine rule tests events or flows for volume changes that occur in regular patterns?

（A）Building block rules

（B）Anomaly rules

（C）Threshold rules

（D）Behavioral rules

正解：B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 2

How can an administrator configure a rule response to add event data to a reference set?

（A）Use the "add to reference set" rule response.

（B）Use AQL functions.

（C）Use the "add the following data to a reference set" rule test.

（D）Write a custom script.

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 3

Which User Management option manages the QRadar functions that the user can access?

（A）Security Options

（B）Admin Role

（C）Security Profile

（D）User Role

正解：C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 4

An administrator is evaluating domain criteria based on an event. The result of a regular expression that was defined in a custom property does not match a domain mapping, and the event was automatically assigned to the default domain.
What is the order of precedence if the event does not match the domain definition for custom properties?

（A）Log source, Log source group, Event collector or data gateway, DDS

（B）Log source. Log source group, App Hosts

（C）DLS, Log source, Event collector or data gateway. Log source group

（D）DLC. Log source, Log source group, Event collector or data gateway

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 5

Which is the default port for the first NetFlow flow source that is configured in QRadar?

（A）2055

（B）514

（C）8413

（D）21

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 6

A user reports that some data points are missing from a generated report. The logs show these notifications, which are determined to be the root cause of the problem:
The accumulator was unable to aggregate all events/flows for this interval.
In what timeframe does this system need to complete data aggregation for it to be deemed successful?

（A）30 seconds

（B）120 seconds

（C）60 seconds

（D）5 seconds

正解：C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

C1000-156 無料問題集「IBM Security QRadar SIEM V7.5 Administration」

弊社を連絡する

関連リンク

トップ試験