IBM C2150-196 Online Practice Questions and Exam Preparation

IBM C2150-196 Online Questions & Answers

• Question 111:

  What type of host name does IBM Security QRadar SIEM V7.1 require in the network settings Hostname field?

  A. Internet Hostname
  B. NetBIOS Hostname
  C. Fully Qualified Host Name
  D. Fully Qualified Domain Name
  D. Fully Qualified Domain Name

• Question 112:

  After editing the IPTables configuration file, which command reloads the IPTables?

  A. serviceiptables save
  B. /etc/sysconfig/iptables restart
  C. /opt/qradar/bin/iptables restart
  D. /opt/qradar/bin/iptables_update.pl
  D. /opt/qradar/bin/iptables_update.pl

• Question 113:

  Which function can be used to tune out Events/Flows with a specific QID and a specific destination IP address from contributing to an offense?

  A. False Positive
  B. Tuning Window
  C. Asset Discovery
  D. Network Hierarchy
  A. False Positive

• Question 114:

  Which Admin function enables system performance alerts?

  A. System Settings
  B. Network Hierarchy
  C. Forwarding Destinations
  D. Global System Notifications
  D. Global System Notifications

• Question 115:

  Howis a new high level or low level event category added to IBM Security QRadar SIEM V7.1?

  A. use the Admin tab
  B. use the Map Event screen
  C. use the qidmap_cli.sh utility
  D. a new event category cannot be added
  D. a new event category cannot be added

• Question 116:

  How can asset profiles be searched?

  A. From the Assets tab
  B. From the Offenses tab
  C. Right-click on any
  D. Address from the Actions pull-down menu
  A. From the Assets tab

• Question 117:

  What does the % of Searches Using Property column in the Index Management Page indicate?

  A. The percentage of saved searches created by users that reference the index.
  B. The total percentage of saved searches in the system that reference the index.
  C. The percentage of executed searches in the selected time range that used theindex.
  D. The percentage of executed searches in the selected time range that successfully used the index.
  C. The percentage of executed searches in the selected time range that used theindex.

• Question 118:

  Which statement best describes the advantages of implementing NetFlow monitoring?

  A. If antivirus software signatures fail todetect malware infection, NetFlow monitoring can help identify malware propagation by using its own signatures.
  B. NetFlow provides the ability to detect suspicious log activity. Each log contains the number of bytes and packets transferred by both the SRC and DST allowing for volume- based reporting of network traffic.
  C. NetFlow provides deep packet inspection, from layers three to seven of the OSI model, increasing visibility into applications; whereas, traditional flow monitoring only provides visibility at layers three and four.
  D. NetFlow provides the ability to detect suspicious network activity, e.g. identify a potential botnet when Local to Remote traffic is matched to an IP address configured in a corresponding Remote Network group.
  D. NetFlow provides the ability to detect suspicious network activity, e.g. identify a potential botnet when Local to Remote traffic is matched to an IP address configured in a corresponding Remote Network group.

• Question 119:

  Which two items must be provided prior to the initial installation and configuration of IBM Security QRadar SIEM V7.1 appliance? (Choose two.)

  A. mouse
  B. monitor
  C. keyboard
  D. serial console
  E. IBM Security QRadar SIFM license key
  B. monitor
  C. keyboard

• Question 120:

  Which group of tests is used to test the sequence of rulesthat have been triggered by events or flows?

  A. DateyTime tests
  B. Behavioral tests
  C. Common Property tests
  D. Function Sequence tests
  D. Function Sequence tests