Online Access Free C2150-624 Practice Test

An Administrator needs to see Events per Second (EPS) and Flows per Minute (FPM) coming to IBM Security QRadar SIEM V7.2.8 through a dashboard. How could this be accomplished?

• A.Create a new dashboard and then go to admin tab. Add item into the dashboard created.
• B.Select any dashboard and customize it. Add a system summary item.
• C.Go to CLI and run the script /opt/qradar/bin/createdashboard.sh
• D.Download the dashboard from IBM Security App Exchange.

An Administrator working with IBM Security QRadar SIEM V7.2.8 was tasked with adding a new Microsoft Azure log source.
What protocol is supported for this?

• A.JDBC
• B.FTP
• C.WinCollect
• D.Syslog

An Administrator of an IBM Security QRadar SIEM V7.2.8 deployment has configured an asset data source with domain information. This has created several new asset profiles.
What would explain these new asset profiles?

• A.The asset data source is attempting to process an asset merge. The information from one asset is combined with the information for another asset under the premise that they are actually the same physical asset.
• B.The data in the asset model is used to compare flow data and identify other assets. These assets are added to a "Whitelist" database for asset reconciliation.
• C.The data in the asset model is domain-aware, this information is applied to all QRadar components, including server discovery.
• D.The asset data source parameter "Collateral Damage Potential" was left at the default "Not Defined"

An Administrator working with a IBM Security QRadar V7.2.8 deployment is looking to add Layer-7 visibility and data collection. The current deployment is running a QRadar 3128-C Console and has 8Gbps of network traffic.
What appliance solution would give this customer the results they are looking for?

• A.Adding an additional QRadar 3128-C Console
• B.Adding a single QRadar QFlow Collector 1310 SR-C/LR-C
• C.Adding two QRadar QFlow Collector 1301 appliances and one QRadar QFlow Collector 1202 appliance
• D.Adding two QRadar QFlow Collector 1301 appliances

The event data collected by IBM Security QRadar SIEM V7.2.8 is being deleted after one month. The legal department required the data be kept for two months.
What can the administrator do to accommodate this requirement?

• A.Change the Default Event Retention Policy property field "Do not delete data in this bucket" to two months.
• B.Change the Default Event Retention Policy property field "Keep data placed in this bucket for" to two months.
• C.Change the nightly backup Priority to "High".
• D.Change the nightly backup to a monthly backup.