What is a precaution an Administrator should take before beginning an upgrade of IBM Security QRadar SIEM V7.2.8?

What is a precaution an Administrator should take before beginning an upgrade of IBM Security QRadar SIEM V7.2.8?A . Close all open offenses.B . Purge old data and events.C . Check and close all open messages.D . Confirm that a backup of the data is complete.View AnswerAnswer: D Explanation: The...

December 6, 2018 No Comments READ MORE +

Console?

Which permission can be assigned to a user from User Roles in the IBM Security QRadar SIEM V7.2.8 Console?A . AdminB . DSM UpdatesC . Flow ActivityD . Configuration ManagementView AnswerAnswer: A Explanation: Grants administrative access to the user interface. You can grant specific Admin permissions. Users with System Administrator...

November 29, 2018 No Comments READ MORE +

How would the Administrator accomplish this from the Offenses tab of the QRadar console?

The Administrator of an IBM Security QRadar SIEM V7.2.8 deployment needs to determine which rules are most active in generating offenses. How would the Administrator accomplish this from the Offenses tab of the QRadar console?A . Rules -> Group -> “Most Active Offenses”.B . Rules -> Rules -> Offense Count...

November 24, 2018 No Comments READ MORE +

How would the Administrator accomplish this from the Offenses tab of the QRadar console?

The Administrator of an IBM Security QRadar SIEM V7.2.8 deployment needs to determine which rules are most active in generating offenses. How would the Administrator accomplish this from the Offenses tab of the QRadar console?A . Rules -> Group -> “Most Active Offenses”.B . Rules -> Rules -> Offense Count...

November 17, 2018 No Comments READ MORE +

How would the Administrator accomplish this from the Offenses tab of the QRadar console?

The Administrator of an IBM Security QRadar SIEM V7.2.8 deployment needs to determine which rules are most active in generating offenses. How would the Administrator accomplish this from the Offenses tab of the QRadar console?A . Rules -> Group -> “Most Active Offenses”.B . Rules -> Rules -> Offense Count...

November 5, 2018 No Comments READ MORE +

After checking the compatibility between primary and secondary HA pairs, what other prerequisite should the Administrator check within Managed Interfaces?

An Administrators will add a secondary host to an IBM Security QRadar SIEM V7.2.8 Console in a High Availability (HA) deployment scenario. After checking the compatibility between primary and secondary HA pairs, what other prerequisite should the Administrator check within Managed Interfaces? A. The shared external storage. B. The server...

November 2, 2018 No Comments READ MORE +

How many dashboards come by default in IBM Security QRadar SIEM V7.2.8?

How many dashboards come by default in IBM Security QRadar SIEM V7.2.8?A . 1B . 5C . 7D . 10View AnswerAnswer: B Explanation: There are five default dashboards: 1 C application overview 2 C compliance overview 3 C network overview 4 C system monitoring 5 C threat and security monitoring...

October 20, 2018 No Comments READ MORE +

Which steps must be followed to achieve this?

An IBM Security QRadar SIEM V7.2.8 Administrator needs to download a nightly configuration backup file from a past day through the Web Console. Which steps must be followed to achieve this?A . Admin Tab -> System Configuration -> Backup and Recovery -> Generate new backup -> SaveB . Admin Tab...

October 19, 2018 No Comments READ MORE +

What can the administrator do to accommodate this requirement?

The event data collected by IBM Security QRadar SIEM V7.2.8 is being deleted after one month. The legal department required the data be kept for two months. What can the administrator do to accommodate this requirement?A . Change the nightly backup Priority to “High”.B . Change the nightly backup to...

October 13, 2018 No Comments READ MORE +

What is the procedure to accomplish this task?

An Administrator working with IBM Security QRadar SIEM V7.2.8 needs to enable the PCI report template. What is the procedure to accomplish this task?A . Admin Tab -> Reports -> Templates -> Compliance -> PCI -> Select “Enable”B . Report Tab -> Enable “Show all templates” -> Group List ->...

October 11, 2018 No Comments READ MORE +