IBM Security QRadar SIEM V7.2.8 Fundamental Administration (C2150-624) Free Practice Test

Question 1

When replacing a Console appliance in an IBM Security QRadar SIEM V7.2.8 deployment using a new IP address or host name, what must be the same on the two Console appliances?

A. The amount of storage must be the same.

B. The software versions of both appliances must match.

C. The Network Configuration and Protocol must be the same.

D. The Basic and Upgrade license must be the same.

Correct Answer: B

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 2

An IBM Security QRadar SIEM V7.2.8 Administrator notices a specific MAC address added to the Asset Reconciliation Domain MAC was blacklisted.
What scenario is causing this to occur?

A. When a MAC address is associated to three or more different IP addresses in 10 minutes or less.

B. When a MAC address is associated to three or more different IP addresses in 2 hours or less.

C. When an IPv4 address is associated to three or more different MAC addresses in 10 minutes or less.

D. When an IPv4 address is associated to three or more different MAC addresses in 2 hours or less.

Correct Answer: B

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 3

An Administrator working with IBM Security QRadar SIEM V7.2.8 is modifying the network hierarchy to contain a few new subnets contained with the 192.0.0.0/26 range.
What is a valid host range contained in this range?

A. 192.0.0.128 -> 192.0.0.192

B. 192.0.0.1 -> 192.0.0.65

C. 192.0.0.192 -> 192.0.0.254

D. 192.0.0.1 -> 192.0.0.62

Correct Answer: D

Question 4

How can an IBM Security QRadar SIEM V7.2.8 Administrator capture specific data to a reference set when QRadar receives the data from events or flow data?

A. On the Admin tab define a Custom Action to add the required data to a Reference Set.

B. Create or modify a rule so the Rule Response will add the required data to a Reference Set.

C. On the Admin tab. create or modify the reference set to capture the required data.

D. Create or modify a report so the required data is exported to a Reference Set.

Correct Answer: C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 5

An Administrator working with IBM Security QRadar SIEM V7.2.8 is constantly receiving the following message:
"SAR Sentinal: Threshold crossed."
Where will the Administrator tune the settings for these messages?

A. Admin tab -> General Settings -> Global System Notifications

B. Admin tab -> System Configuration -> Global System Notifications

C. Admin tab -> System Configuration -> General Settings -> System Notifications

D. Admin tab -> System Notifications -> System Activity Reporter Notifications

Correct Answer: B

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 6

An Administrator working with IBM Security QRadar SIEM V7.2.8 is constantly receiving the following message:
"MPC: Unable to process offense. The maximum number of offenses has been reached." What is the reason for this message?

A. The Multi Packet Capturer cannot handle more than 500 offense reports at a certain point in time.

B. The Multi Packet Capturer cannot handle more than 2500 attacks at the same time.

C. The Magistrate Processor Core has reached its maximum amount of network connections at a certain time.

D. The Magistrate Processor Core has more than 2500 active Offenses or 100000 overall Offenses.

Correct Answer: D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Welcome to TestSimulate

IBM Security QRadar SIEM V7.2.8 Fundamental Administration (C2150-624) Free Practice Test