IBM C2150-400 Online Practice Questions and Exam Preparation

IBM C2150-400 Online Questions & Answers

• Question 111:

  Which network monitoring port does Juniper Jflow require to be configured in QRadar?

  A. Port 80
  B. Port 443
  C. Port 1080
  D. Port 2055
  D. Port 2055

• Question 112:

  An off-site target can connect to which component

  A. Flow collector
  B. Event collector
  C. Flow processor
  D. Event processor
  D. Event processor

  ---

  Reference: https://www.ibm.com/support/knowledgecenter/SS42VS_7.2.6/com.ibm.qradar.doc/ c_qradar_adm_qradar_siem_component.html

• Question 113:

  What is the maximum height for a custom logo in a report header?

  A. 25 pixels
  B. 50 pixels
  C. 100 pixels
  D. 500 pixels
  B. 50 pixels

  ---

  Reference: ftp://public.dhe.ibm.com/software/security/products/qradar/documents/7.2.0/QLM/EN/ QLM_72_UserGuide.pdf (16, branding reports, about this task)

• Question 114:

  There are unknown log records from unsupported security device events in the Log activity tab. You are planning to write an LSX for an unsupported security device type based on UDSM.

  What is the file format and payload option for exporting the unknown log records?

  A. PDF and full export
  B. CSV and full export
  C. XML and visible column
  D. CSV and visible column
  C. XML and visible column

• Question 115:

  What two are valid actions that a user can perform when monitoring offenses? (Choose two.)

  A. Import offenses
  B. Backup offenses
  C. Restore offenses
  D. Send email notifications
  E. Hide or close an offense from any offense list
  B. Backup offenses
  E. Hide or close an offense from any offense list

• Question 116:

  Which two primary data sources send updates to the Asset profiler? (Choose two.)

  A. Source IP
  B. Source Port
  C. Scan Result
  D. Destination IP
  E. Identity Events
  A. Source IP
  B. Source Port

• Question 117:

  Which action can be performed on a license key?

  A. Erase a license key
  B. Delete a license key
  C. Unload a license key
  D. Unallocate a license key
  B. Delete a license key

• Question 118:

  What is the benefits of enabling indexes on event properties?

  A. Decreased disk usage
  B. Improved report accuracy
  C. Improved search performance
  D. Improved performance for regular expression patterns
  C. Improved search performance

  ---

  Reference: https://xavierashe.wordpress.com/2012/10/29/new-features-in-qradar-7-1/

• Question 119:

  There are unknown log records from unsupported security device events in the Log activity tab. You are planning to write an LSX for an unsupported security device type based on UDSM. What is the file format for exporting the unknown log records?

  A. CSV
  B. PDF
  C. XLS
  D. Text
  D. Text

  ---

  Reference: http://www.sans.org/reading-room/whitepapers/logging/qradar-log-source-extension- walkthrough-35452

• Question 120:

  Which TCP port must be open to allow communication between the primary and secondary HA hosts?

  A. 7709
  B. 7788
  C. 7789
  D. 7790
  C. 7789

  ---

  Reference: http://documentation.extremenetworks.com/PDFs/SIEM-IPS/ Extreme_SIEM_High_Availability_Guide.pdf (16)