IBM C2150-400 Online Practice Questions and Exam Preparation

IBM C2150-400 Online Questions & Answers

• Question 101:

  Which two fields are required to be filled out when adding a new network to the network hierarchy? (Choose two.)

  A. Name
  B. Country
  C. IP and CIDR
  D. Target Flow Collector
  E. Maximum Content Capture
  A. Name
  C. IP and CIDR

• Question 102:

  Which action can be performed on a license key?

  A. Reuse allocation of a license
  B. Revert allocation of a license
  C. Revoke allocation of a license
  D. Recover allocation of license
  B. Revert allocation of a license

  ---

  Reference: ftp://public.dhe.ibm.com/software/security/products/qradar/documents/7.2.0/QRadar/EN/ QRadar_72_AdminGuide.pdf (page 37)

• Question 103:

  Which two formats are available for reports generated from the QRadar Reporting Tab? (Choose two.)

  A. TXT
  B. CSV
  C. PDF
  D. HTML
  E. PostScript
  C. PDF
  D. HTML

  ---

  Reference: https://www.ibm.com/support/knowledgecenter/SS42VS_7.2.6/com.ibm.qradar.doc/ t_qradar_view_gen_rpt.html

• Question 104:

  Which statement is correct for patching an HAed server?

  A. If the Secondary host is in an Active state, the patch should be applied to the Secondary.
  B. The patch should be applied to the Primary first and the patch should be applied to the Secondary.
  C. Remove Secondary, then apply the patch on Primary, and then add the Secondary again.
  D. Run the patch on the Primary and the Secondary will be updated Automatically.
  B. The patch should be applied to the Primary first and the patch should be applied to the Secondary.

• Question 105:

  Which two search filters are available on the QRadar console while making an asset search? (Choose two.)

  A. PCI Severity. NERC Severity
  B. Vulnerability CVSS Base Score. Vulnerability Risk Score
  C. Vulnerability on Open Port, Vulnerability on Open Service
  D. Vulnerability on Open Port, Vulnerability External Reference
  E. Vulnerability on Source Port, Vulnerability on Destination Port
  B. Vulnerability CVSS Base Score. Vulnerability Risk Score
  E. Vulnerability on Source Port, Vulnerability on Destination Port

• Question 106:

  Which action prevents an offense from being removed from the database?

  A. Hide
  B. Show
  C. Export
  D. Protect
  D. Protect

  ---

  Reference: https://www.ibm.com/support/knowledgecenter/SS42VS_7.2.6/com.ibm.qradar.doc/ t_qradar_protect_offenses.html

• Question 107:

  Which directory from the QRadar host can be moved to offboard storage?

  A. A/ar
  B. /store
  C. /home
  D. /media
  B. /store

• Question 108:

  Where does the information about total number of Assets and Vulnerability processed appear?

  A. Asset table in Assets tab
  B. VA Scanner Configuration screen
  C. Vulnerabilities Tab > Scan Result
  D. Mouse Ober popup on Schedule Scan Status field
  C. Vulnerabilities Tab > Scan Result

  ---

  Reference: https://www.ibm.com/developerworks/community/files/basic/anonymous/api/library/84637628- 566b-48b0-8be8-5a5a9cd7994d/document/e7f81328-dbf8-416f-8156-a292222933ab/media (slide 22)

• Question 109:

  Which two IP Addresses are required to Add a HA host? (Choose two.)

  A. Public IP Address
  B. Private IP Address
  C. Cluster IP Address
  D. Remote IP Address
  E. IP Address of Secondary Host
  C. Cluster IP Address
  E. IP Address of Secondary Host

  ---

  Reference: https://www.ibm.com/support/knowledgecenter/SS42VS_7.2.6/com.ibm.qradar.doc/ t_qradar_ha_create_cluster.html

• Question 110:

  Which function allows a custom event property to be removed from a selected event?

  A. Anomaly
  B. Map Event
  C. False Positive
  D. Extract Property
  D. Extract Property