Skip to main content

C1000-026 Real Exam Questions

IBM Security QRadar SIEM V7.3.2 Fundamental Administration

60 questions available · Page 1 of 6

Updated Exam DumpsVerified AnswersPass Guarantee

Get Complete Exam Dumps
Question 1 Single choice

An administrator would like to extend the functionality of QRadar using an external application.

Which file format is supported to successfully upload an application from the QRadar Console?

  1. A

    .zip

  2. B

    .tgz

  3. C

    .sh

  4. D

    .exe

Show answer and explanation

Correct answer: A

Explanation

References:
https://www.ibm.com/support/knowledgecenter/en/SS42VS_7.3.1/com.ibm.appfw.doc/
b_qradar_appframework_devguide.pdf

Question 2 Single choice

Which event routing rule is required to add QRadar Data Store (QDS) capability to a deployment?

  1. A

    Log Only (exclude Analytics)

  2. B

    Delete data When storage space is required

  3. C

    Bypass Correlation

  4. D

    Delete data immediately after the retention period has expired

Show answer and explanation

Correct answer: A

Explanation

References:
https://www.ibm.com/support/knowledgecenter/en/SS42VS_7.3.2/com.ibm.qradar.doc/
t_qradar_adm_data_store.html

Question 3 Single choice

An administrator installed a new App Host and would like to move the existing applications from the Console to the App Host.

What steps should be performed?

  1. A

    Admin Tab > Extension Management > Click to change where apps are run

  2. B

    Admin Tab > System Settings > Move apps

  3. C

    Admin Tab > Extension Management > Move apps

  4. D

    Admin Tab > System and License Management > Click to change where apps are run

Show answer and explanation

Correct answer: D

Question 4 Single choice

An administrator enters the QRadar web console into a web browser but does not get a response.

Which process is responsible for the QRadar GUI?

  1. A

    tomcat

  2. B

    consoled

  3. C

    magistrated

  4. D

    guid

Show answer and explanation

Correct answer: A

Explanation

References:
https://www.ibm.com/support/pages/qradar-core-services-and-impact-when-restarted

Question 5 Single choice

A company has two different domains in their IBM QRadar system: Domain_A and Domain_B. An administrator has been tasked to create a rule to look only at events that are tagged with Domain_A and ignore rules that are tagged with the other domains.

What domain text should the administrator use to create this rule?

  1. A

    is from domain: Domain_A

  2. B

    from domain: Domain_A

  3. C

    domain is: Domain_A

  4. D

    domain is one of: Domain_A

Show answer and explanation

Correct answer: D

Explanation

References:
https://www.ibm.com/support/knowledgecenter/en/SS42VS_7.3.1/com.ibm.qradar.doc/
c_domain_specific_rules_offenses.html

Question 6 Single choice

An administrator needs to restore from backup the applications in QRadar.

Which configuration item should the administrator select?

  1. A

    Installed Applications Configuration

  2. B

    Backup Installed Applications

  3. C

    Installed Applications Backup Configuration

  4. D

    Installed Programs Configuration

Show answer and explanation

Correct answer: A

Explanation

References:
https://www.ibm.com/support/knowledgecenter/SS42VS_7.3.2/com.ibm.qradar.doc/
t_adm_appnode_appbackup.html

Question 7 Single choice

An administrator needs to import a list of HR staff logins into a reference set.

Which file type can be used with the import function in the reference set editor window?

  1. A

    xml

  2. B

    csv

  3. C

    xls

  4. D

    json

Show answer and explanation

Correct answer: B

Explanation

References:
https://www.ibm.com/support/knowledgecenter/en/SS42VS_7.3.2/com.ibm.qradar.doc/
c_qradar_adm_refdata_ui.html

Question 8 Single choice

Which IBM monitoring application can be used to see detailed health and status information at the application, middleware, and system level?

  1. A

    QRadar Deployment Intelligence App

  2. B

    QRadar Operations App

  3. C

    QRadar Assistant App

  4. D

    QRadar Advisor With Watson App

Show answer and explanation

Correct answer: A

Explanation

References:
https://www.ibm.com/support/knowledgecenter/en/SSKMKU/com.ibm.QDIapp.doc/
c_qapps_QDI_intro.html

Question 9 Single choice

An administrator needs to collect logs from the Command Line Interface (CLI).

Which command should the administrator use?

  1. A

    /opt/bin/qradar/support/get_logs.sh

  2. B

    /opt/support/get_logs.sh

  3. C

    /opt/support/qradar/get_logs.sh

  4. D

    /opt/qradar/support/get_logs.sh

Show answer and explanation

Correct answer: D

Explanation

References:
https://www.ibm.com/support/pages/getting-help-what-information-should-be-submitted-qradar-service-request

Question 10 Single choice

An administrator needs to upgrade their QRadar environment. The administrator has downloaded the Patchupdate File from Fixcentral and transferred this Image to the Appliance.

Which commands does the administrator need to run to start the upgrade process?

  1. A

    1. cd/medial/updates
    2. systemctl stop Qradar
    3. Qradar.sh upgrade all
    4. systemctl reboot

  2. B

    1. mount -o loop -t squashfs XX_patchupdate.sfs /media/updates
    2. cd /media/updates
    3. /installer

  3. C

    1. cd /media/updates
    2. yum update XX_patchupdate.sfs

  4. D

    1. patch XX_patchupdate.sfs

Show answer and explanation

Correct answer: B