IBM C2150-400 Online Practice Questions and Exam Preparation

IBM C2150-400 Online Questions & Answers

• Question 1:

  Which two data collection types are supported for SAINT scanner configurations? (Choose two.)

  A. App Scan
  B. Live Scan
  C. Report Only
  D. Passive Scan
  E. Vulnerability Scan
  B. Live Scan
  C. Report Only

  ---

  Reference: http://www.ibm.com/support/knowledgecenter/SSKMKU/com.ibm.dsm.doc/ c_vuln_Saintoverview.html

• Question 2:

  What is QRadar QFlow Collector combined with QRadar SIEM designed to do?

  A. Collect Netflow records
  B. Layer 7 application visibility
  C. Receive Syslog messages
  D. Ensure secure message collection
  A. Collect Netflow records
  B. Layer 7 application visibility

  ---

  Reference: http://www-03.ibm.com/software/products/en/qradar-qflow-collector

• Question 3:

  Which Log Source Type should be used to add a Log Source with Log Source Extension?

  A. Any
  B. Custom
  C. Universal DSM
  D. Log Source Extension
  D. Log Source Extension

  ---

  Reference: ftp://ftp.software.ibm.com/software/security/products/qradar/documents/71MR1/LogMgr/ LogSources-71MR1.pdf (page 12)

• Question 4:

  A mail server typically communicates with 50 hosts per second in the middle of the night and then suddenly starts communicating with 1.000 hosts a second. The administrator wants to get an email alert whenever this situation is being observed.

  Which type of rule should an administrator create to monitor this situation?

  A. Flow Rule
  B. Anomaly Rule
  C. Threshold Rule
  D. Behavioral Rule
  C. Threshold Rule

• Question 5:

  What options on the Reports tab allows you to import logos and specific images for use on reports?

  A. Design
  B. Images
  C. Branding
  D. Customization
  C. Branding

  ---

  Reference: http://www-01.ibm.com/support/docview.wss?uid=swg21622721

• Question 6:

  Which two types are available for the graph type "horizontal bar" on QRadar? (Choose two.)

  A. Top Source IPs
  B. Top Source Ports
  C. Top Login Failures
  D. Top Destination IPs
  E. Top Destination Ports
  A. Top Source IPs
  E. Top Destination Ports

  ---

  Reference: https://www.ibm.com/support/knowledgecenter/SS42VS_7.2.6/com.ibm.qradar.doc/ c_qradar_graph_typ.html

• Question 7:

  Which two proxy options are required to be set when using a Proxy Server for Auto Updates in QRadar? (Choose two.)

  A. Proxy Type
  B. Proxy Name
  C. Proxy Schedule
  D. Proxy Server URL
  E. Proxy Port number
  B. Proxy Name
  D. Proxy Server URL

• Question 8:

  Which operating system is supported for creating a bootable flash drive for recovery?

  A. IBM AIX
  B. MAC OS X
  C. Ubuntu Linux
  D. Windows OS
  C. Ubuntu Linux

• Question 9:

  From which screen can a Secondary Host be added to an HA host?

  A. Admin -> System Settings
  B. Admin -> Deployment Editor
  C. Admin -> Store and Forward
  D. Admin -> System and License Management
  D. Admin -> System and License Management

  ---

  Reference: ftp://ftp.software.ibm.com/software/security/products/qradar/documents/7.2.4/QRadar/ b_qradar_ha_guide.pdf (21)

• Question 10:

  Which two fields are required to be filled out when adding a new network to the network hierarchy? (Choose two.)

  A. Weight
  B. IP and CIDR
  C. Capture Filter
  D. Flow Source Interface
  E. Flow Retention Length
  A. Weight
  D. Flow Source Interface