IBM C1000-026 Exam Questions Instant Access

Question 1

An administrator has been asked to configure a new QRadar console high availability (HA) deployment. Both

the primary and secondary consoles have been installed with the QRadar software.

What should the administrator do to complete the HA configuration?

AAdd the secondary console to the deployment, and then create the HA host.

BReinstall the QRadar software on the secondary console using an ''HA Recovery Setup''.

CSelect ''Secondary Host'' on the wizard when adding the secondary host to the deployment.

DCreate the HA host to add the secondary console to the deployment.

Answer : A

b_qradar_ha_guide.pdf

Question 2

An administrator would like to add a new managed host which uses an existing Network Address Translation (NAT).

Which parameters have to be provided if ''Host is NATed'' is chosen while adding a managed host?

ASelect Network Attached Telemetric, Enter MAC address of the server or appliance to add

BSelect NATed network, Enter public IP of the server or appliance to add

CSelect NATed network, Enter MAC address of the server or appliance to add

DSelect Network Attached Telemetric, Enter public IP of the server or appliance to add

Answer : B

sa=t&rct=j&q=&esrc=s&source=web&cd=1&ved=2ahUKEwihsu3Li5XmAhVYwAIHHeCLDtoQFjAAegQIBhAC

&url=https%3A%2F%2Fwww.ibm.com%2Fdeveloperworks%2Fcommunity%2Fforums%2Fajax%2Fdownload

%2Fd5b20a5b-11bd-4a1d-b294-08ec138eb0e1%2F9d086dd8-eee9-4cbd-912d-26059ffdd0ca%

2FQRadar_721_AdminGuide.pdf&usg=AOvVaw1GO4OmOjWV7uiyCLrdE0FV

Question 3

An administrator needs to complete the upgrade process from V7.3.1 to V7.3.2.

What is the correct procedure?

ACopy the ISO file extension to the recommended directories and use this file

BUse the ISO file to execute the upgrade process

CDo a clean installation using the ISO file on a bootable USB device

DCopy the SFS file extension to the recommended directories and use this file

Answer : D

t_qradar_up_ugrad_sys.html

Question 4

An administrator needs to combine multiple extraction and calculation-based properties into a single property.

Which Ariel Query Language (AQL) statement can be used?

AAQL-based custom properties

BAQL functions and SELECT, FROM, or database names

CAQL functions and AQL-based custom properties

DAQL functions

Answer : A

c_aql_whatsnew_731.html

Question 5

An administrator is seeing the following system notification:

38750057 -- A protocol source configuration may be stopping events from being collected.

What is a valid user action to this issue?

ARe-install the QRadar Console

BReview the /var/log/qradar.log file for more information

CRestart the QRadar Console

DReview the /var/log/error.log file for more information

Answer : D

com.ibm.qradar.doc/38750057.html

Question 6

An administrator enters the QRadar web console into a web browser but does not get a response.

Which process is responsible for the QRadar GUI?

Atomcat

Bconsoled

Cmagistrated

Dguid

Answer : A

Question 7

A QRadar upgrade is planned and a maintenance window is scheduled. The administrator must stage the

FIXPACK from IBM Fix Central.

Which QRadar FIXPACK file type must the administrator download?

ARPM

BIMG

CSFS

DXFS

Answer : C

20Security&product=ibm/Other+software/IBM+QRadar+Network

+Insights&release=7.3.0&platform=Linux&function=all

IBM Security QRadar SIEM V7.3.2 Fundamental Administration C1000-026 Exam Questions