IBM Security QRadar SIEM V7.5 Administration (C1000-156) Free Practice Test

Question 1

In which QRadar section can the administrator view the license giveback rate?

A. Log Activity tab by searching for the term "giveback" in the Quick Filter

B. Admin tab > system settings

C. Admin tab > License pool management

D. Log Activity tab > AQL query in the Advanced Search "select LicenseGiveback from license"

Correct Answer: C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 2

From which site can you download software updates for QRadar?

A. IBM Passport Advantage Online

B. IBM Fix Central

C. QRadar 101

D. IBM X-Force Exchange

Correct Answer: B

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 3

Which command does an administrator run in QRadar to get a list of installed applications and their App-ID values output to the screen?

A. /opt/qradar/support/recon ps

B. /opt/qradar/support/recon connect 1005

C. opt/qradar/support/deployment_info.sh

D. /opt/qradar/support/threadTop.sh

Correct Answer: C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 4

The Report wizard provides a step-by-step guide to design, schedule, and generate reports. Which three (3) key elements does the report wizard use to help you create a report?

A. Content

B. Display

C. Layout

D. Format

E. Container

F. Banner

Correct Answer: A,C,D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 5

A QRadar administrator needs to quickly check the disk space for all managed hosts. Which command does the administrator use?

A. /opt/qradar/support/all_servers.sh -C -K 'watch Is'

B. /opt/qradar/support/all_servers.sh 'Is -ltrsh"

C. /opt/qradar/support/all_servers.sh "rra -rf /store'

D. /opt/qradar/support/all_servers.sh -C -k 'df -Th'

Correct Answer: D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 6

Which is a benefit of a lazy search?

A. Providing every result no matter the quantity of the search results

B. Searching across domains for any configured user

C. Getting results that are limited to a specific range

D. Finding lOCs quickly

Correct Answer: C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 7

When restoring backups of your apps in a QRadar environment, what information is restored?

A. The applications that are installed on the Console are restored, and any applications that are installed on an AppHost must be backed up separately.

B. The apps configuration and app data are restored.

C. The apps configuration, the console configuration, and app data are restored.

D. The last known good version of your apps configuration, your application data, and any apps that were configured on an App Host are restored.

Correct Answer: D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Welcome to TestSimulate

IBM Security QRadar SIEM V7.5 Administration (C1000-156) Free Practice Test