C2150-196 Exam Details

  • Exam Code
    :C2150-196
  • Exam Name
    :IBM Security QRadar SIEM V7.1 Implementation
  • Certification
    :IBM Certifications
  • Vendor
    :IBM
  • Total Questions
    :121 Q&As
  • Last Updated
    :Jan 09, 2020

IBM C2150-196 Online Questions & Answers

  • Question 51:

    Where is the optimal location for IBM Security QRadar QFIow appliances to monitor Internettraffic?

    A. in the datacenter
    B. at the workstation switches
    C. at the wireless access points
    D. at an ingress/egress point in the network

  • Question 52:

    What must be done to put licenses into effect after applying a license file using the Managed License action of the System and License Management dialog?

    A. click on Deploy License
    B. select Restart System to activate the license key
    C. open theDeployment Editor, right-click on each host, and select Deploy
    D. select System and License Manage System and then select Deploy License Key

  • Question 53:

    Which option is available for sharing offenses with non-IBM Security QRadar users?

    A. provide URLt0 offense
    B. invoke script forthird-party
    C. select the option to e-mail offense details
    D. select the option to export the offense data as a PDE

  • Question 54:

    What does the command qchange_netsetup do?

    A. It is used to upgrade the appliance's network settings after the initial setup.
    B. It is used to definethe MAC address of the interfaces during the initial setup.
    C. It is used to change the appliance's networking settings after the initial setup.
    D. It is used to define the appliance's networking settings during the initial setup.

  • Question 55:

    When a routing rule is configured, why might the Drop option be selected?

    A. The Drop option allows alerting without storage in the database and can still be forwarded.
    B. The Dropoption is used to control disk storage usage on the event processor and to reduce overall network traffic.
    C. The Drop option is used when IBM Security QRadar SIEM V7.1 is used as the log source of record for deleting of events.
    D. The Drop option is convenient for preventing noisy sensors (such PIX firewalls or default SNORTs) from overwhelming the Custom Rule Engine.

  • Question 56:

    When adding a managed host using encryption, which network port must be openbi- directionally between the console and new host?

    A. 22
    B. 115
    C. 443
    D. 445

  • Question 57:

    After clicking on the Backup and Recovery button in the Admin tab, which three options are found in the Backup Archives page? (Choose three.)

    A. Revert
    B. Restore
    C. Remove
    D. Configure
    E. Backup Now
    F. On Demand Backup

  • Question 58:

    When scheduling a vulnerability scan which factor would be controlled by the Concurrency Mask?

    A. The level of detail of the scan data based on the number of hosts involved in a particular run.
    B. The load placed on each host that is being scanned during the time that the scan is underway.
    C. The potential risk to the subnet being scanned due to the number and frequency of operations performed during the scan.
    D. The load placed on the network, scanner, and/or IBM Security QRadar SIEM V7.1 due to thenumber of scans being performed during a scanner run.

  • Question 59:

    What action(s) can be taken from the Log and Network Activity tab?

    A. close an offense based on existinganomaly rules
    B. create and edit rules and building blocks, and add log sources and flow sources
    C. open offenses based on users in the organization performing unauthorized activity
    D. create and edit searches, filter on specific details, sort, and right-click and filter on specific details

  • Question 60:

    A QID can belong to how many categories?

    A. 1
    B. 2
    C. 3
    D. unlimited

Tips on How to Prepare for the Exams

Nowadays, the certification exams become more and more important and required by more and more enterprises when applying for a job. But how to prepare for the exam effectively? How to prepare for the exam in a short time with less efforts? How to get a ideal result and how to find the most reliable resources? Here on Vcedump.com, you will find all the answers. Vcedump.com provide not only IBM exam questions, answers and explanations but also complete assistance on your exam preparation and certification application. If you are confused on your C2150-196 exam preparations and IBM certification application, do not hesitate to visit our Vcedump.com to find your solutions here.