C2150-624 Online Practice Questions and Answers

When it comes to licensing, what is the difference between Events and Flows and how they are licensed?

A. Flows are licensed based on overall count over a minute, where Events are licensed based on overall count per second.

B. Flows are licensed based on overall count per second, where Events are licensed based on overall count over a minute.

C. Flows and Events are both licensed by overall count per minute under an Upgraded License and per second on a Basic License.

D. Flows and Events are both licensed by overall count per second under an Upgraded License and per second on a Basic License.

What is the Events Per Second (EPS) basic license limit in an IBM Security QRadar V7.2.8 2100 hardware appliance?

A. 200

B. 1000

C. 2500

D. 10000

What is the maximum number of dashboards a user can create with IBM Security QRadar SIEM V7.2.8?

A. 10

B. 25

C. 100

D. 255

An IBM Security QRadar SIEM V7.2.8 Administrator needs to check if the "hostcontext" process is running. How can the Administrator do this?

A. hostcontext status

B. status hostcontext service

C. service hostcontext status

D. /etc/qradar/hostcontext status

An Administrator working within IBM Security QRadar SIEM V7.2.8 has a network hierarchy that cannot support anymore network objects. To remedy this, they want to implement a supernet. Some of the customer CIDRs are:

-209.60.128.0/24

-209.60.129.0/24

-209.60.130.0/24

-

209.60.131.0/24

Which supernet should be used to shrink the amount of network objects for the supplied group of CIDRs?

A.

209.60.128.0/22

B.

209.60.129.0/23

C.

209.60.128.0/23

D.

209.60.127.0/27

What is the function of the dashboard tab in IBM Security QRadar SIEM V7.2.8?

A. To create reference sets.

B. To create users and roles and track their activity.

C. Dashboards allow quick access to building block and rule creation.

D. Dashboards allow organization of dashboard items into functional views.

What must be done when creating a user with a non-admin role on an IBM Security QRadar SIEM V7.2.8 system that is utilizing Active Directory authentication?

A. Ensure the password has a minimum of 8 characters.

B. Create the user's initial password and have them change it immediately.

C. Ensure the user's QRadar password matches their Active Directory password.

D. A password does not need to be set on QRadar when using Active Directory authentication.

An Administrator of an IBM Security QRadar SIEM V7.2.8 deployment has configured an asset data

source with domain information. This has created several new asset profiles.

What would explain these new asset profiles?

A. The asset data source parameter "Collateral Damage Potential" was left at the default "Not Defined"

B. The data in the asset model is domain-aware, this information is applied to all QRadar components, including server discovery.

C. The data in the asset model is used to compare flow data and identify other assets. These assets are added to a "Whitelist" database for asset reconciliation.

D. The asset data source is attempting to process an asset merge. The information from one asset is combined with the information for another asset under the premise that they are actually the same physical asset.

What are the focus areas of the default dashboards available with IBM Security QRadar SIEM V7.2.8?

A. operating system status, network activity, system monitoring, and compliance

B. security, network activity, application activity, system monitoring, and compliance

C. errors, attack activity, network accesses, operating system status, and offense activity

D. errors, attack activity, security, network activity, application activity, system monitoring, and compliance

An Administrator working with a IBM Security QRadar SIEM V7.2.8 deployment needs to build an Ariel

Query to find all events data received in the last 24 hours where the magnitude of the events is larger than

1 but smaller than 5.

What Query needs to be used?

A. SELECT * FROM events WHERE magnitude > 1 AND < 5 LAST 1 DAYS

B. SELECT * FROM events WHERE magnitude BETWEEN 1 AND 5 LAST 1 DAYS

C. SELECT * FROM eventstable WHERE magnitude BETWEEN 1 and 5 LAST 1 DAYS

D. SELECT * FROM eventstable WHERE magnitude BETWEEN 1 AND 5 LAST 1 DAYS