Online Access Free C2150-614 Practice Test

A Deployment Professional wants to reduce the number of false positives being generated by a
WebSense log source.
Which rule test could be created to solve this problem, assuming the Building Blocks have been updated
for the customer's environment?

• A."and NOT when an event matches any of the following BB:HostDefinition: Trusted Network Source IP"
• B."and NOT when an event matches any of the following BB:HostDefinition: Network Management
  Servers"
• C."and NOT when an event matches any of the following BB:HostDefinition: VA Scanner Source IP"
• D."and NOT when an event matches any of the following BB:HostDefinition: Proxy Servers"

A Deployment Professional is asked to schedule the forwarding of events when the network is quiet,
usually around 2 to 3 a.m. console time. The customer states that there is no restriction to bandwidth on
the available 1 Gbp/s WAM connection during this time.
Which value should be used for the forward transfer rate?

• A.1
• B.0
• C.10,000,000
• D.1,000,000

A Deployment Professional is investigating an offense and decides that a custom property should be
added to the event and the rule to make them more useful. Once is added, though, the rule stops firing.
What could be causing this problem?

• A.The events are not being correlated.
• B.The rule threshold for the previews conditions is not met.
• C.The events were affected by the rule change.
• D.The custom property was disabled.

Which IBM Security QRadar function, if misconfigured, could cause rules that are only supposed to be
applied to local hosts to be applied to external hosts?

• A.Flow Collector
• B.Log Collector
• C.Network Hierarchy
• D.VA Scanner

A Deployment Professional needs to change the folder where automatic updates are downloaded.
Which Auto Update settings should be configured under Change Settings?

• A.Advanced Tab > Directory
• B.Basic Tab > Download Path
• C.Advanced Tab > Download Path
• D.Basic Tab > Directory