IBM C2150-612 - IBM Security QRadar SIEM V7.2.6, Associate Analyst Exam
Page: 3 / 11
Total 54 questions
Question #11 (Topic: )
What is a Device Support Module (DSM) function within QRadar?
A. Unites data received from logs
B. Provides Vendor specific configuration information
C. Scans log information based on a set of rules to output offenses
D. Parses event information for SIEM products received from external sources
Answer: D
Question #12 (Topic: )
Which QRadar component is designed to help increase the search speed in a deployment
by allowing more data to remain uncompressed?
by allowing more data to remain uncompressed?
A. QRadar Data Node
B. QRadar Flow Processor
C. QRadar Event Collector
D. Qradar Event Processor
Answer: A
Question #13 (Topic: )
Which three pages can be accessed from the Navigation menu on the Offenses tab?
(Choose three.)
(Choose three.)
A. Rules
B. By Category
C. My Offenses
D. By Event Name
E. Create Offense
F. Closed Offenses
Answer: A,B,C
Question #14 (Topic: )
A mapping of a username to a users manager can be stored in a Reference Table and
output in a search or a report.
Which mechanism could be used to do this?
output in a search or a report.
Which mechanism could be used to do this?
A. Quick Search filters can select users based on their manager’s name.
B. Reference Table lookup values can be accessed in an advanced search.
C. Reference Table lookup values can be accessed as custom event properties.
D. Reference Table lookup values are automatically used whenever a saved search is run.
Answer: B
Question #15 (Topic: )
How is an event magnitude calculated?
A. As the sum of the three properties Severity, Credibility and Relevance of the Event
B. As the sum of the three properties Severity, Credibility and Importance of the Event
C. As a weighted mean of the three properties Severity, Credibility and Relevance of the Event
D. As a weighted mean of the three properties Severity, Credibility and Importance of the Event
Answer: C
