C2150-612 Online Practice Questions and Answers

Which key elements does the Report Wizard use to help create a report?

A. Layout, Container, Content

B. Container, Orientation, Layout

C. Report Classification, Time, Date

D. Pagination Option, Orientation, Date

Where are events related to a specific offense found?

A. Offenses Tab and Event List window

B. Dashboard and List of Events window

C. Offense Summary Page and List of Events window

D. Under Log Activity, search for Events associated with an Offense

Which two are top level options when right clicking on an IP Address within the Offense Summary page? (Choose two.)

A. WHOIS

B. Navigate

C. DNS Lookup

D. Information

E. Asset Summary Page

What is the largest differentiator between a flow and event?

A. Events occur at a moment in time while flows have a duration.

B. Events can be forwarded to another destination, but flows cannot.

C. Events allow for the creation of custom properties, but flows cannot.

D. Flows only contribute to local correlated rules, while events are global.

Which browser is officially supported for QRadar?

A. Safari version 9.0.3

B. Chromium version 33

C. 32-bit Internet Explorer 9

D. Firefox version 38.0 ESR

What ability does marking a custom property as "optimized" provide?

A. Allows you to use the custom property in a rule test

B. Allows you to process events above your license rating

C. Allows offenses to merge both events and flows into the same offense

D. Allows for offenses, events and flows to be compared directly in real time

What is the purpose of coalescing?

A. To reduce the number of events which count against EPS licenses

B. To reduce the amount of data received by QRadar event collectors

C. To reduce the amount of data going through the pipeline and stored onto disk

D. To reduce the number of offenses generated by QRadar as part of the tuning process

Which QRadar add-on component can quickly retrace the step-by-step actions of an attacker?

A. QRadar Risk Manager

B. QRadar Flow Connector

C. QRadar Incident Forensics

D. QRadar Vulnerability Manager

Where can event data be exported from for external analysis?

A. From the Offenses Tab, select the offense and right click, select export event data

B. From the list of events page, select actions and click export to XML or export to CSV

C. From the offense summary page, select actions and click on export to XML or export to CSV.

D. From the Offenses Tab, select the offense, click on actions, select export to XML or export to CSV

Where could you get additional details on why the offense was triggered when working on the Offense Summary page?

A. Display > Notes

B. Display > Rules

C. Display > Flows

D. Display > Events