IBM C1000-026 Exam Questions Instant Access

Question 1

After fixing the assets that contributed to the asset growth deviation, an administrator needs to find the asset

artifacts that have to be cleaned up.

What action should the administrator take to find the artifacts?

AOn the ''Log Activity'' tab, run the ''Deviating Asset Growth: Asset Report event search''

BOn the Admin Tab, select System Configuration --> Asset Profiler Configuration

CRun the ./cleanAssets.sh --list command

DOn the Asset tab, run the ''Clean Assets'' action

Answer : A

t_qradar_adm_assets_deleting_invalid_assets.html

Question 2

An administrator needs to collect logs from the Command Line Interface (CLI).

Which command should the administrator use?

A/opt/bin/qradar/support/get_logs.sh

B/opt/support/get_logs.sh

C/opt/support/qradar/get_logs.sh

D/opt/qradar/support/get_logs.sh

Answer : D

Question 3

Which event QID test is used to send an email as a rule response when disk usage reaches a threshold?

A(38750076) Disk Sentry Reached Warn threshold

B(38750076) Disk Sentry Disk Usage Exceeded Warning threshold levels

C(38750076) Disk Usage Exceeded Warn threshold

D(38750076) Disk Sentry Disk Usage Exceeded Warn threshold

Answer : B

Question 4

When troubleshooting issues with QRadar applications, which application Docker container log file can be

used to get more information about the apps?

A/var/log/qradar.error

B/var/log/qradar.log

C/var/log/app.log

D/store/log/app.log

Answer : D

Question 5

Which app should be used for monitoring QRadar performance and health?

AQRadar Deployment Intelligence

BQRadar Monitoring Intelligence

CQRadar Extension Management

DQRadar Performance Overview

Answer : A

c_qapps_QDI_intro.html

Question 6

An administrator needs to develop advanced filters to retrieve information from the QRadar System pertaining

to the top abnormal events of the most bandwidth-intensive IP addresses.

How can the administrator do this?

ABuild an AQL query using the QRadar Scratchpad

BCombine GROUP BY and ORDER BY clauses in a single query

CUse the IBM DataStudio to create the query

DBuild an AQL query using the QRadar GUI using Assets > Search Filter

Answer : B

b_qradar_aql.pdf (21)

Question 7

An administrator needs to import a list of HR staff logins into a reference set.

Which file type can be used with the import function in the reference set editor window?

Axml

Bcsv

Cxls

Djson

Answer : B

c_qradar_adm_refdata_ui.html

IBM Security QRadar SIEM V7.3.2 Fundamental Administration C1000-026 Exam Questions