IBM C2150-400 Online Practice Questions and Exam Preparation

IBM C2150-400 Online Questions & Answers

• Question 171:

  With a Data Deletion Policy of "When storage is required", data will remain in storage until which scenario is reached?

  A. If used disk space reaches 88% for records and 85% for payloads.
  B. If used disk space reaches 85% for records and 88% for payloads.
  C. If used disk space reaches 85% for records and 83% for payloads.
  D. If used disk space reaches 83% for records and 85% for payloads.
  C. If used disk space reaches 85% for records and 83% for payloads.

  ---

  Reference: http://www.juniper.net/techpubs/software/management/strm/2013_2/strm-admin-guide.pdf (page 85, see the table, 5th row, second column, first bulleted point)

• Question 172:

  An off-site source can be connected to which component?

  A. QFlow
  B. Event Collector
  C. Flow Processor
  D. Event Processor
  C. Flow Processor

  ---

  Reference: ftp://public.dhe.ibm.com/software/security/products/qradar/documents/71MR1/SIEM/CoreDocs/ QRadar_71MR1_AdminGuide.pdf (130)

• Question 173:

  What is used to collect security events in a QRadar Distributed Deployment?

  A. QRadar 3124 Console
  B. QRadar 1724 Processor
  C. QRadar 1624 Processor
  D. QRadar 1310 QFlow Collector
  D. QRadar 1310 QFlow Collector

• Question 174:

  Which statement is true with regard to planning QRadar SIEM high availability?

  A. The secondary host can be in different subnet as the primary host.
  B. The secondary HA host that you want to add to the HA cluster can be a component in another HA cluster.
  C. The primary HA host that you want to add to the HA cluster must be a component in another HA cluster.
  D. When the IP address of the primary host is reassigned as a cluster virtual IP, the new IP address that you assign to the primary must be in the same subnet.
  D. When the IP address of the primary host is reassigned as a cluster virtual IP, the new IP address that you assign to the primary must be in the same subnet.

  ---

  Reference: ftp://ftp.software.ibm.com/software/security/products/qradar/documents/7.2.4/QRadar/ b_qradar_ha_guide.pdf (Page 11, IP addressing and subnets, second bullet)

• Question 175:

  Which two statements are true regarding QRadar Log Sources and DSMs? (Choose two.)

  A. One log source must have one DSM.
  B. One DSM must have many log sources.
  C. One log source must have many DSMs.
  D. One DSM can have only one log source.
  E. One DSM can be used in many log sources.
  C. One log source must have many DSMs.
  E. One DSM can be used in many log sources.