IBM C2150-196 Online Practice Questions and Exam Preparation

IBM C2150-196 Online Questions & Answers

• Question 61:

  Categorizing log sources into groups allows clients to efficiently view and track log sources. Which statement best characterize Log Source groups?

  A. By default log sources go into the Temp folder.
  B. User access is required to create, edit, or delete log source groups.
  C. Each log source group can display a maximum of 10,000 log sources.
  D. The default log source group for auto discovered log sources is Other.
  D. The default log source group for auto discovered log sources is Other.

• Question 62:

  What is the last step to add aprotocol based log source?

  A. on the Admin tab click Deploy Changes
  B. from Log Sources, select Log Source Type, and click Save
  C. from Log Sources, select Log Source Identifier, and click Save
  D. on the Admin tab, select Actions and click Deploy Pull Configuration
  A. on the Admin tab click Deploy Changes

• Question 63:

  What must be done when creating a user's password on an IBM Security QRadar SIEM V7.1 (QRadar) system that is utilizing Active Directory authentication?

  A. ensure the password has aminimum of 8 characters
  B. create the user's initial password and have them change it immediately
  C. ensure the user's QRadar password matches their Active Directory password
  D. a password does not need to be set on QRadar when using Active Directory authentication
  D. a password does not need to be set on QRadar when using Active Directory authentication

• Question 64:

  By default how often are events forwarded from an event collector to an event processor?

  A. every hour
  B. continuously
  C. every 2 hours
  D. it does not forward until the forwarding schedule is set
  B. continuously

• Question 65:

  Which IBM Security QRadar SIEM V7.1 appliance types are designed to collect, process, and store log event messages?

  A. 12XX
  B. 13XX
  C. 15XX
  D. 16XX
  D. 16XX

• Question 66:

  Which SNMP protocol should be used when confidentiality, integrity, and authentication are required?

  A. SNMPv1
  B. SNMPv2
  C. SNMPv3
  D. SNMPv4
  C. SNMPv3

• Question 67:

  Where does IBM SecurityQRadar SIEM V7.1 get the severity of an event?

  A. from the QIDmap
  B. from the event payload
  C. from the Tomcat server
  D. from the user's definition
  A. from the QIDmap

• Question 68:

  What does the IP Right Click Menu Extensions plug-in do in IBM SecurityQRadar SIEM V7.1?

  A. It allows the selected IP address to be deleted.
  B. It allows the selected IP address to be tuned as a false positive.
  C. It allows the selected IP address to be added to a reference set.
  D. It allows additional details to be accessedfor the selected IP address.
  D. It allows additional details to be accessedfor the selected IP address.

• Question 69:

  What is an IBM Security QRadar network object?

  A. An asset definition
  B. Avulnerability scanner
  C. A collection of CIDR addresses
  D. A device sending logs to a QRadar
  C. A collection of CIDR addresses

• Question 70:

  When creating a behavioral rule in Automated Anomaly Analysis, which three components are weighted todetermine the rule?

  A. autoregressive pattern, fit to underlying curve, and moving average
  B. seasonal or cyclical behavior, underlying trend, and random fluctuation
  C. previous period value, current observation, and average of residuals for future observations
  D. length of the seasonal component, date range for the trend, and time window during the day
  B. seasonal or cyclical behavior, underlying trend, and random fluctuation