IBM C2150-612 Online Practice Questions and Exam Preparation

IBM C2150-612 Online Questions & Answers

• Question 1:

  What is the correct procedure to both assign and add a note to an offense from the Graphical User Interface (GUI)?

  A. Both tasks must be done independently and can only be done on the Offenses Tab.
  B. With the new release of 7.2.6 this can now be done in one step from the Offenses Tab only.
  C. Both tasks must be done independently but can be completed from both the Offenses Tab and the Offense Summary Page.
  D. With the new release 7.2.6 this can be done in one step, both the Offenses Tab and the Offense Summary Page.
  B. With the new release of 7.2.6 this can now be done in one step from the Offenses Tab only.

• Question 2:

  In a distributed QRadar deployment with multiple Event Collectors, from where can syslog and JDBC log sources collected?

  A. Syslog log sources and JDBC log sources may be collected by any Event Collector.
  B. One Event Collector must collect ALL syslog events and another Event Collector must collect ALL JDBC events.
  C. Syslog log sources and JDBC log sources are always collected by the collector assigned in the log source definition.
  D. Syslog log sources may be collected by any Event Collector, but JDBC log sources will always be collected by the collector assigned in the log source definition.
  A. Syslog log sources and JDBC log sources may be collected by any Event Collector.

  ---

  explanation:

  Reference: https://www.ibm.com/support/knowledgecenter/SS42VS_7.3.1/com.ibm.qradar.doc/b_siem_deployment.pdf (12)

• Question 3:

  Where could you get additional details on why the offense was triggered when working on the Offense Summary page?

  A. Display > Notes
  B. Display > Rules
  C. Display > Flows
  D. Display > Events
  D. Display > Events

• Question 4:

  What is the definition of asset profile on QRadar?

  A. It is any network endpoint that sends or receives data across a network infrastructure.
  B. It is all the information that IBM Security QRadar SIEM collected over time about a specific asset.
  C. It is the information servers and hosts in a network provide to assist users when resolving security issues.
  D. It is an application used to configure and distribute settings to devices and computers in an organization, school, or business.
  B. It is all the information that IBM Security QRadar SIEM collected over time about a specific asset.

  ---

  explanation:

  Reference: https://www.ibm.com/support/knowledgecenter/SS42VS_7.2.6/com.ibm.qradar.doc/c_qradar_ug_asset_prof_about.html

• Question 5:

  Which three things can be found under the Information menu when right clicking an IP address? (Choose three.)

  A. Asset Profile
  B. DNS Lookup
  C. Hide Offense
  D. WHOIS Lookup
  E. Annotation View
  F. Username Lookup
  A. Asset Profile
  B. DNS Lookup
  D. WHOIS Lookup

  ---

  explanation:

  Reference: https://www.ibm.com/support/knowledgecenter/en/SS42VS_7.2.6/com.ibm.qradar.doc/c_qradar_ug_asset_rightclick.html

• Question 6:

  Which three options are available on the New Search on the My Offenses and All Offenses pages? (Choose three.)

  A. Notes
  B. Source IP
  C. Magnitude
  D. Attack Name
  E. Malware Name
  F. Specific Interval
  B. Source IP
  D. Attack Name
  F. Specific Interval

  ---

  explanation:

  Reference: https://www.ibm.com/support/knowledgecenter/en/SS42VS_7.3.1/com.ibm.qradar.doc/t_qradar_search_my_all_off_pages.html

• Question 7:

  Which port does HTTP traffic commonly use?

  A. Port 22
  B. Port 53
  C. Port 80
  D. Port 443
  A. Port 22

  ---

  explanation:

  Reference: https://www.ibm.com/support/knowledgecenter/en/SS42VS_7.2.6/com.ibm.qradar.doc/c_qradar_adm_common_ports.html

• Question 8:

  What are three examples of a custom Dashboard? (Choose three.)

  A. Asset View
  B. Top Applications
  C. Most Recent Offenses
  D. Tabs which are accessible
  E. Source and Destination DNS
  F. Internet Threat Information Center
  C. Most Recent Offenses
  D. Tabs which are accessible
  E. Source and Destination DNS

• Question 9:

  Which QRadar component provides Layer 7 visibility within a physical network infrastructure?

  A. QRadar Data Node
  B. QRadar Flow Analyzer
  C. QRadar Flow Collector
  D. QRadar VFlow Collector
  D. QRadar VFlow Collector

  ---

  explanation:

  Reference: https://www.robertrojek.pl/2017/11/09/qradar-appliances-types/

• Question 10:

  Which feature of a Next Generation Firewall is not available on previous firewalls?

  A. VPN Support
  B. Layer 3 based firewall rules
  C. Integrated signature based IPS engine
  D. Network and Port-Address Translation (NAT)
  C. Integrated signature based IPS engine