IBM Security QRadar SIEM V7.2.7 Deployment (C2150-614) Free Practice Test

Question 1

What is the impact on network bandwidth when selecting 'Global' on a rule instead of 'Local' in a
distributed environment?

A. All matching events are sent to the QRadar Console for processing and therefore, the QRadar Console
uses more bandwidth.

B. All events are sent to the QRadar Console for processing and therefore, the QRadar Console uses
more bandwidth.

C. All matching events are sent to each QRadar Event Processor for processing and therefore, all Event
Processor use more bandwidth.

D. All events are sent to each QRadar Event Processor for processing and therefore, all Events
Processors use more bandwidth.

Correct Answer: A

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 2

Two health insurance companies, Company A and Company B, have been involved in a merger. Both
companies have IBM Security QRadar SIEM V7.2.7 implemented to monitor their environments.
It has been determined that Company A will assume the duties of compliance monitoring across the entire
organization. Because of this, Company B will need to forward its events encrypted to Company A's
QRAdar Event Collector.
What is one of the steps that must be done to make sure the information is encrypted in transit?

A. Connect Company B's Event Collector to the off-site source

B. Ensure the SSH private key for the off-site source is available to Company A's Event Collector

C. Ensure the SSH public key for the off-site source is available to Company A's Event Collector

D. Connect Company A's Event Collector to the off-site target

Correct Answer: B

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 3

A software install is being performed on a client's hardware. The Deployment Professional is about to
install the QRadar software on a host which will become an HA primary.
Which command is mandatory?

A. /opt/qradar/bin/prepare_ha.sh

B. /media/cdrom/post/prepare_ha.sh

C. tail-f/var/bin/ha.logs

D. /opt/qradar/ha_setup.sh

Correct Answer: B

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 4

A Deployment Professional is working with a customer interested in deploying IBM Security QRadar SIEM
V7.2.7 and is wishing to use the default configuration and default license with 1,600 network objects.
Why won't this work?

A. The default configuration allows for a maximum of 1,500 network objects

B. The default configuration utilizing the default license only allows for 1,200 network objects

C. The default configuration allows for a maximum of 1,000 network objects

D. The default configuration utilizing the default license only allows for 300 network objects

Correct Answer: D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 5

A Deployment Professional has created a new Building Block (BB), and it's not returning any expected
events. The Deployment Professional has checked to ensure the BB is enabled and active. No errors are
returned.
What should be done to correct this BB problem?

A. Make sure that you use "Global System" so that all of the QRadar deployment uses it

B. Ensure that the BB has been set to "use" and a Deploy Full Configuration was done

C. Add your new custom BB to the "System: Load Building Blocks" rule

D. Manually enter in all QID's of the events it till monitor so it will automatically be used

Correct Answer: C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 6

A custom with IBM Security QRadar SIEM V7.2.7 is using Active Directory to authenticate users. After a
crash, the authentication servers are down and some users tried to log in before the authentication
servers came back up.
What will happen to these users?

A. Local users are able to log in with their local password.

B. Logging on is restricted to administrative users and non-administrative will needed to wait until the
authentication server comes back online.

C. Active Directory users are able to log in with their password.

D. Administrative and non-administrative users are unable to log in with their password until
authentication servers come back online.

Correct Answer: B

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Welcome to TestSimulate

IBM Security QRadar SIEM V7.2.7 Deployment (C2150-614) Free Practice Test