Question #1
In addition of United states of America in which other countries are Qradar on cloud deployed
- A . Belgium, Colombia, France, Indonesia
- B . Ireland, Luxembourg, panama, Romania
- C . Denmark, India, Netherlands, South Africa
- D . Brazil, Canada, Germany, United Kingdom
Correct Answer: D
Question #2
What statement describes the value QFlow Flow Data Provides, within QRadar
- A . QFlow flow data contains vulnerability information that can be searched or tested in rules
- B . QFlow flow data contains calculated file hash data that can be searched or tested in rules
- C . QFlow Flow data contains unencrypted payload content that can be searched or tested in rule
- D . QFlow flow data contains high-level and low-level event categorization that can be searched and tested in rule
Correct Answer: C
Question #3
When no Flows are being collected by a single QRadar on cloud data gateway, what is the maximum events per second supported by that data gateway?
- A . 2000 EPS
- B . 10000 EPS
- C . 25000 EPS
- D . 50000 EPS
Correct Answer: B
Question #4
What is an administrative roles available to Qradar on cloud customers
- A . Root
- B . Operator
- C . Full Admin
- D . SaaS Admin
Correct Answer: D
Question #5
Who has full admin access to the QRadar on cloud environment?
- A . Dev Ops
- B . All users
- C . SaaS Admin
- D . QROC Admin group
Correct Answer: A
Question #6
When is Dev Ops Authorized to access the Stored Data in QRadar on Cloud?
- A . Anytime
- B . Upon the customer request
- C . When setting up log sources
- D . When authorized by DevOps Manager
Correct Answer: D
Question #7
Why are offenses created in Qradar?
- A . To correlate index properties grouped in dashboards
- B . To eliminate the need to perform security investigations
- C . To group non correlated vulnerabilities data into single view
- D . To connect multiple suspicious symptoms into a single incident
Correct Answer: D
Question #8
Which logic operator is used in QRadar to link Custom Rules Tests?
- A . AND and OR
- B . AND NOT and OR
- C . AND and AND NOT
- D . AND, AND NOT and OR
Correct Answer: C
Question #9
How does event differ from flow in Qradar?
- A . events are supports by Qradar while flows are not
- B . Events handle network packet while flow handle log data
- C . Events are correlation of network traffic while flows are records from device
- D . Events are records from device that describes an action on network or host and flows
Correct Answer: D
Question #10
Where in offenses can the data sources that contributed to that offense be viewed?
- A . Vulnerability data
- B . Dashboard Page
- C . Summary Window
- D . Building blocks and Rules
Correct Answer: C