C1000-026無料問題集「IBM Security QRadar SIEM V7.3.2 Fundamental Administration」

質問 1

An administrator plans to deploy multiple log sources that share a common configuration.
How many log sources can be added at one time?

（A）750

（B）250

（C）1000

（D）500

正解：D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 2

An administrator needs to complete the upgrade process from V7.3.1 to V7.3.2.
What is the correct procedure?

（A）Use the ISO file to execute the upgrade process

（B）Do a clean installation using the ISO file on a bootable USB device

（C）Copy the ISO file extension to the recommended directories and use this file

（D）Copy the SFS file extension to the recommended directories and use this file

正解：D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 3

Which event QID test is used to send an email as a rule response when disk usage reaches a threshold?

（A）(38750076) Disk Usage Exceeded Warn threshold

（B）(38750076) Disk Sentry Reached Warn threshold

（C）(38750076) Disk Sentry Disk Usage Exceeded Warn threshold

（D）(38750076) Disk Sentry Disk Usage Exceeded Warning threshold levels

正解：D 解答を投票する

質問 4

An administrator is about to integrate logs from a custom firewall in a QRadar deployment using syslog. The SIEM has two domains, namely Domain A and Domain B.
While reviewing the following sample logs, the administrator notices a "context" keyword:
May 14 11:05:01 192.168.1.23 20190514 11:05:00 context=contextA permit 192.168.1.24 source:
10.10.1.15; source_port: 64094; destination: 10.10.13.34; service: 53; protocol: udp; May 13 12:07:01 192.168.1.23 20190513 11:07:00 context=contextB permit 192.168.1.25 source:
10.10.1.15; source_port: 64094; destination: 10.10.13.34; service: 53; protocol: udp; Which options assign the "contextA" logs to DomainA and the "contextB" logs to domain B? (Choose two.)

（A）Create a single log source, create a "Context" custom event property, and assign the log to the correct domain using a custom rule.

（B）Create two individual log sources by configuring a separated logging instance for each context on the firewall and assign each log source to the correct domain.

（C）Create a single log source, create a "Context" custom event property, and assign the log to both domains using a custom rule.

（D）Create two individual log sources using the context value as log source identifier and assign each log source to the correct domain.

（E）Create a single log source, create a "Context" custom event property, and assign the log to the correct domain using custom event property value.

正解：B、D 解答を投票する

質問 5

An administrator wants to have all QRadar apps running on a new App Host that was configured to have dedicated CPU, storage and memory resources for the Apps. Several issues were presented during the installation of the App Host.
To troubleshoot, what should the administrator check?

（A）If port 5000 is opened on the console

（B）If the completion of the /opt/qradar/check_app_host.sh script was successful

（C）If an IP table entry was already created to allow traffic from the App Host IP

（D）If IP tables are disabled on the console

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 6

Due to regulatory constraints, an administrator must increase the minimum password length and complexity.
In which QRadar section can the administrator change this setting?

（A）Admin / Authentication

（B）Admin / Password policy

（C）Admin / System settings

（D）Admin / Security profiles

正解：B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 7

An administrator needs data backup.
What information is contained in the data backup?

（A）Audit log information, Event data, Flow data, Report data, Indexes

（B）Audit log information, Event data, Indexes, Index management information, Flow data, Report data, Groups

（C）Audit log information, Event data, Indexes, Index management information, Flow data, Report data

（D）Audit log information, Event data, Flow data, Report data, Indexes, Log sources

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

C1000-026 無料問題集「IBM Security QRadar SIEM V7.3.2 Fundamental Administration」

弊社を連絡する

関連リンク

トップ試験