Download IBM Security QRadar SIEM V7.2.6 Associate Analyst.C2150-612.PracticeTest.2018-07-29.29q.tqb
| Vendor: | IBM |
| Exam Code: | C2150-612 |
| Exam Name: | IBM Security QRadar SIEM V7.2.6 Associate Analyst |
| Date: | Jul 29, 2018 |
| File Size: | 94 KB |
How to open VCEX files?
Files with VCEX extension can be opened by ProfExam Simulator.
Discount: 20%
Demo Questions
Question 1
A Security Analyst found multiple connection attempts from suspicious remote IP addresses to a local host on the DMZ over port 80. After checking related events no successful exploits were detected.
Upon checking international documentation, this activity was part of an expected penetration test which requires no immediate investigation.
How can the Security Analyst ensure results of the penetration test are retained?
- Hide the offense and add a note with a reference to the penetration test findings
- Protect the offense to not allow it to delete automatically after the offense retention period has elapsed
- Close the offense and mark the source IP for Follow-Up to check if there are future events from the host
- Email the Offense Summary to the penetration team so they have the offense id, add a note, and close the Offense
Correct answer: B
Explanation:
References:http://www.ibm.com/support/knowledgecenter/SSKMKU/com.ibm.qradar.doc/c_qradar_Off_Retention.html References:
http://www.ibm.com/support/knowledgecenter/SSKMKU/com.ibm.qradar.doc/c_qradar_Off_Retention.html
Question 2
Which list is only Rule Actions?
- Modify Credibility; Send SNMP trap; Drop the Detected Event; Dispatch New Event.
- Modify Credibility; Annotate Event; Send to Forwarding Destinations; Dispatch New Event.
- Modify Severity; Annotate Event; Drop the Detected Event; Ensure the detected event is part of an offense.
- Modify Severity; Send to Forwarding Destinations; Drop the Detected Event; Ensure the detected event is part of an offense.
Correct answer: A
Explanation:
References:http://www.ibm.com/support/knowledgecenter/SSKMKU/com.ibm.qradar.doc/t_qradar_create_cust_rul.html References:
http://www.ibm.com/support/knowledgecenter/SSKMKU/com.ibm.qradar.doc/t_qradar_create_cust_rul.html
Question 3
What are the two available formats for exporting event and flow data for external analysis? (Choose two.)
- XML
- DOC
- PDF
- CSV
- HTML
Correct answer: AD
HOW TO OPEN VCE FILES
Use VCE Exam Simulator to open VCE files
HOW TO OPEN VCEX AND EXAM FILES
Use ProfExam Simulator to open VCEX and EXAM files
ProfExam at a 20% markdown
You have the opportunity to purchase ProfExam at a 20% reduced price
Get Now!