IBM C2150-196 Online Practice Questions and Exam Preparation

IBM C2150-196 Online Questions & Answers

• Question 21:

  Which tuning template is available in IBM Security QRadar SIEM V7.1?

  A. Custom
  B. Common
  C. Enterprise
  D. Small Business Edition
  C. Enterprise

• Question 22:

  When adding a new IBM Security QRadar SIEM managed host, the password is required for which user?

  A. root on the new appliance
  B. root on the console appliance
  C. webmin on the console appliance
  D. configservices on the new appliance
  A. root on the new appliance

• Question 23:

  Where is WinCollect configured as an Authorized Service?

  A. the WinCollect icon under the Admin tab
  B. the Authorized Services icon under the Admin tab
  C. the WinCollectdrop-down under Authorized Services > Add
  D. the Authorized Services drop-down under WinCollect> Add Authorized Service
  B. the Authorized Services icon under the Admin tab

• Question 24:

  How are user permissions applied using Log Source groups?

  A. using user roles
  B. applied to individual users
  C. applied to network objects
  D. applied to authorized services
  A. using user roles

• Question 25:

  Which file should be sent to IBM Support if contacting them for system problems?

  A. systemerr.outfile produced from /opt/ibm/esc/get_logs.pl
  B. sysoutput.log file produced from /opt/ibm/support/getjogs.sh
  C. logs_.tar.zip file producedfrom /opt/ibm/electronicsupport.sh
  D. logs_.tar.bz2 file produced from /opt/qradar/support/get_logs.sh
  D. logs_.tar.bz2 file produced from /opt/qradar/support/get_logs.sh

• Question 26:

  What is event and flow hashing used for in IBM Security QRadar SIEM V7.1?

  A. topermit security flagging
  B. so events and flows can be indexed for quicker searching
  C. to determine if tampering has occurred on the events and flows records
  D. to add encryption to the events and flows so they cannot be tampered with
  C. to determine if tampering has occurred on the events and flows records

• Question 27:

  What is the default setting for Major Updates in Auto Updates > Change Settings > Update Types?

  A. Disable
  B. Auto Install
  C. Auto Update
  D. Auto Integrate
  A. Disable

• Question 28:

  Which two actions allow modification of the current displayed search result set? (Choose two.)

  A. click on the Actions button
  B. click on the Add Filter button
  C. click on Quick Filter then select Show All
  D. right-click on an item then select a filter option
  E. click Search then select Manage Search Results
  B. click on the Add Filter button
  D. right-click on an item then select a filter option

• Question 29:

  What does using the Integrated Management Module of the IBM Security QRadar SEM V7.1 (QRadar) appliance allow a user to do?

  A. remotely manage the QRadar appliance to run reports
  B. remotely manage the QRadar custom rule configuration
  C. remotely manage the QRadar Web interface used to perform administrative functions
  D. remotely manage the QRadar appliance as if the user was sittingdirectly at the console
  D. remotely manage the QRadar appliance as if the user was sittingdirectly at the console

• Question 30:

  After gathering all required files from the IBM Security QRadar SIEM V7.1 appliance using SSH connectivity which protocol can be used to retrieve the tar.bz2 file or any other files to send to support?

  A. FTP
  B. TFTP
  C. HTTP
  D. SFTP
  D. SFTP