IBM C2150-624 Online Practice Questions and Exam Preparation

IBM C2150-624 Online Questions & Answers

• Question 61:

  How many dashboards come by default in IBM Security QRadar SIEM V7.2.8?

  A. 1
  B. 5
  C. 7
  D. 10
  B. 5

  ---

  There are five default dashboards: 1 application overview 2 compliance overview 3 network overview 4 system monitoring 5 threat and security monitoring

• Question 62:

  An Administrator using IBM Security QRadar SIEM V7.2.8 needs to force an instant backup to run. Which option should be selected?

  A. Backup Now
  B. On Demand Backup
  C. Launch On Demand Backup
  D. Configure On Demand Backup
  D. Configure On Demand Backup

• Question 63:

  Given the following RegEx: (\b\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}\b) What data does this expression extract?

  A. URL
  B. User Name
  C. IP address
  D. Email Address
  C. IP address

• Question 64:

  An IBM Security QRadar SIEM V7.2.8 Administrator needs to restore a backup archive after a hardware failure.

  The Administrator has navigated to the System Configuration tab with the Navigation menu, what are the next steps to restore?

  A. System Settings -> upload the backup file that you want to restore -> Configure the parameters ->Restore -> OK
  B. Backup and Recovery -> select the archive that you want to restore -> Configure -> configure the parameters -> Restore -> OK
  C. System Settings -> select the archive that you want to restore -> On Demand Restoration ->Configure -> Configure the parameters -> Restore -> OK -> OK
  D. Backup and Recovery -> select the archive that you want to restore -> Restore, on the Restore a Backup window -> Configure the parameters -> Restore -> OK -> OK
  D. Backup and Recovery -> select the archive that you want to restore -> Restore, on the Restore a Backup window -> Configure the parameters -> Restore -> OK -> OK

• Question 65:

  When upgrading IBM Security QRadar SIEM V7.2.8, the upgrade file needs to be made accessible to the operating system. Which command will accomplish this task?

  A. mount -o loop -t iso9660 .iso /media/updates/
  B. mount -o loop -t squashfs.sfs /media/updates/
  C. umount -o loop -t iso9660 .iso /media/updates/
  D. umount -o loop -t squashfs.sfs /media/updates/
  B. mount -o loop -t squashfs.sfs /media/updates/

• Question 66:

  An Administrator has configured a customized log source extension to provide asset updates to IBM Security QRadar SIEM V7.2.8. Instead of QRadar receiving an update that has the host name of the asset that the user logged in to, the log

  source generates many asset updates that all have the same host name.

  In this situation what will QRadar report?

  A. This will cause stale asset data.
  B. This will cause asset growth deviations.
  C. This will cause excessive authentication failure events.
  D. This will cause excessive flow data to be processed by the Magistrate.
  B. This will cause asset growth deviations.

  ---

  Instead of QRadar receiving an update that has the host name of the asset that the user logged in to, the log source generates many asset updates that all have the same host name. In this situation, the asset growth deviation is caused by one asset profile that contains many IP addresses and user names.

• Question 67:

  An Administrator working with IBM Security QRadar SIEM V7.2.8 has to add a new host name to a reference set with the name "Allowed Hosts" from the command line interface. Which command would accomplish this task?

  A. ./ReferenceSetUtil.sh add Allowed\ Hosts computer.domain.com
  B. ./UtilReferenceSet.sh add "Allowed Hosts" "computer.domain.com"
  C. ./UtilReferenceSet.sh update Allowed\ Hosts "computer.domain.com"
  D. ./ReferenceSetUtil.sh update "Allowed Hosts" "computer.domain.com"
  A. ./ReferenceSetUtil.sh add Allowed\ Hosts computer.domain.com

• Question 68:

  An IBM Security QRadar SIEM V7.2.8 Administrator needs to download a nightly configuration backup file from a past day through the Web Console. Which steps must be followed to achieve this?

  A. Admin Tab -> System Configuration -> Backup and Recovery -> Generate new backup -> Save
  B. Admin Tab -> System Configuration -> Backup and Recovery ->Choose the name of an Existing backup
  C. Admin Tab -> System Configuration -> Backup and Recovery -> Import New Backup -> Select file extension -> Save
  D. Admin Tab -> System Configuration -> System Settings -> Database Settings -> Choose the name of an Existing backup
  B. Admin Tab -> System Configuration -> Backup and Recovery ->Choose the name of an Existing backup

  ---

  The backups are listed in Backup and recovery section of the system configuration in the admin tab. You can click on the existing backup and it will show you the options to download it.

• Question 69:

  An IBM Security QRadar SIEM V7.2.8 Administrator is implementing a retention policy of flows and events. The retention buckets are sequenced in priority order from the top row to the bottom row. What happens if a record does not match any of the configured retention buckets?

  A. The record is dropped and is not stored
  B. The record is stored in the default retention bucket
  C. The record is stored in a raw format inside /default partition
  D. The record is stored in any of the available retention buckets
  B. The record is stored in the default retention bucket

• Question 70:

  An Administrator working with IBM Security QRadar SIEM V7.2.8 was tasked with adding a new Microsoft Azure log source.

  What protocol is supported for this?

  A. FTP
  B. JDBC
  C. Syslog
  D. WinCollect
  C. Syslog