Question 1
A deployment professional decides to improve visibility in the network and successfully installs the Flow Collector.
What should the deployment professional connect the Flow Collector to?
What should the deployment professional connect the Flow Collector to?
Question 2
A deployment professional is redesigning the existing deployment to add a event processor due to an increased event rate. The deployment professional observes the events per second (EPS) to be a collective 30,000 EPS from two event collectors (EC1 and EC2) and sometimes exceeds the EPS capacity. EC1 and EC2 are in same network segment.
Considering there are more licenses available than needed in the license pool, which processor should the deployment professional replace the event collector(s) with?
Considering there are more licenses available than needed in the license pool, which processor should the deployment professional replace the event collector(s) with?
Question 3
A deployment professional receives instructions to virtualize the currently installed QRadar SIEM All-in-One appliance and to provide requirements. VM specifications must suffice for 4000 EPS.
What are the minimum processor and memory requirements that the deployment professional must use?
What are the minimum processor and memory requirements that the deployment professional must use?
Question 4
A customer has a Network Vulnerability Scanner which is not supported by IBM QRadar.
How can a deployment professional integrate such a scanner with IBM QRadar?
How can a deployment professional integrate such a scanner with IBM QRadar?
Question 5
During a new deployment, the client states that they want to collect windows logs and forward them to QRadar, but they are already using another agent to collect logs for a managed service provider [MSP] The client would like to continue forwarding these logs to the MSP as well as send them to QRadar.
Which architectural solutions would meet the client's requirements?
Which architectural solutions would meet the client's requirements?
