IBM C2150-196 Online Practice Questions and Exam Preparation

IBM C2150-196 Online Questions & Answers

• Question 91:

  What notation is used to enter a class A network 10.0.0.0 into an IBM Security QRadar SIEM V7.1 network hierarchy?

  A. 10.*.*.*
  B. 10 .0 .0 .0/8
  C. 10.0.0.0/255.0.0.0
  D. 10.0.0.0-10.255.255.255
  B. 10 .0 .0 .0/8

• Question 92:

  By default theServer Discovery function inserts discovered servers into building blocks in which category?

  A. Host Definitions
  B. Device Definitions
  C. System Definitions
  D. Compliance Definitions
  A. Host Definitions

• Question 93:

  Which component processes events against defined custom rules?

  A. Magistrate
  B. Flow Collector
  C. Event Collector
  D. Event Processor
  D. Event Processor

• Question 94:

  What are three default charting options available within the Report wizard? (Choose three.)

  A. Delta
  B. Flows
  C. Identity
  D. Anomaly
  E. Events/Logs
  F. Asset Vulnerabilities
  B. Flows
  E. Events/Logs
  F. Asset Vulnerabilities

• Question 95:

  If an IBM Security QRadar 1790 virtual appliance is added to a configuration, which capability becomes available?

  A. additional storage capacity for event data
  B. additional Web interface for user browsing
  C. additional storage capacity for OFlow data
  D. internal storage capacity for event and QFlow data
  C. additional storage capacity for OFlow data

• Question 96:

  Which statement best describe the data migration process available in IBM Security QRadar SIEM V7.1 (QRadar)?

  A. Launch the data_ariel_migrate.pl utility under the /opt/qradar/support directory.
  B. Move /store/ariel to /store/ariel_old, mount /store/ariel to external storage, and move the contents of ariel_old to ariel.
  C. Move the existing mount points under the Admin > System Settings Configuration option in the QRadar user interface.
  D. Mount to the external storage solution and allow the local content to auto-merge. Moving or copying any content ahead of mounting will likely lead to data loss and/or data corruption.
  B. Move /store/ariel to /store/ariel_old, mount /store/ariel to external storage, and move the contents of ariel_old to ariel.

• Question 97:

  What is a purpose of a rule action?

  A. to add an event or flow property to a reference set
  B. to send out the event or flow informationby e-mail or SNMP
  C. to rename the offense description based on user entered text
  D. to change the current event or flow's magnitude, trigger an offense, or annotate the offense
  D. to change the current event or flow's magnitude, trigger an offense, or annotate the offense

• Question 98:

  Which statement applies to IBM Security QRadar SIEM V7.1 virtual appliances?

  A. QRadar XX90 appliances maybe installed into a Hyper-V environment.
  B. QRadar XX90 appliances maybe installed into a VMware ESXi environment.
  C. QRadar XX90 appliances may not be mixed with QRadar software licenses in a virtual server environment.
  D. QRadar XX90 appliances may be installed as a native Os on appropriately configured customer premise hardware.
  B. QRadar XX90 appliances maybe installed into a VMware ESXi environment.

• Question 99:

  What happens topreviously collected events when an event is mapped?

  A. They are re-mapped to the new mapping.
  B. They are not mapped to the new mapping.
  C. The user is prompted for the action to take.
  D. The new mapping is added to the old mapping
  D. The new mapping is added to the old mapping

• Question 100:

  What must be done to enable High Availability (HA) disk synchronization?

  A. Admin> HA Setting> Enable Disk Synchronization
  B. synchronization can only be set up while initializing the HA cluster C. edit the HA cluster and select the Disk Synchronization check box
  D. synchronization can only be set up while installing the HA activation key for the secondary appliance
  B. synchronization can only be set up while initializing the HA cluster C. edit the HA cluster and select the Disk Synchronization check box