IBM C1000-140 Exam Questions Instant Access

Question 1

A deployment professional is about to add a secondary appliance to a QRadar high availability deployment. It is confirmed that both the primary and the secondary appliances are on the same QRadar version. However, the hardware configuration of both appliances is different.

What must be confirmed before adding the secondary appliance to the high availability deployment?

AThe combined size of the /store and /transient partitions on the primary host must be larger than the /store partition on the secondary host.

BThe secondary host must use a different management interface than the primary HA host.

CThe primary host must contain more physical interfaces than the secondary.

DThe combined size of the /store and /transient partitions on the secondary host must be equal to or larger than the /store partition on the primary host.

Answer : D

Question 2

In a multidomain and multitenant environment, how is event visibility provided to users?

AAn event is in a domain, a domain is attached to a tenant, and a tenant is referenced in the security profile of the user.

BAn event is allocated to a tenant, a tenant is attached to a domain, and a domain is referenced in the security profile of the user.

CAn event is allocated to a tenant, and a tenant is referenced in the security profile of the user.

DAn event is in a domain, and a domain is referenced in the security profile of the user.

Answer : A

Question 3

Which item can be used in the configuration of a domain in QRadar?

AThe tenant that owns the log source that the event is allocated to

BThe network the event comes from

CA custom event property in an event

DThe type of the log source that the event is allocated to

Answer : A

Question 4

Which type of network hierarchy can be configured in QRadar?

AAny range of IP addresses

BIPv6 only

CIPv4 only

D/24 range of IP addresses

Answer : A

Question 5

What must a deployment professional select when defining a new flow source?

AThe destination port

BThe source IP address

CThe flow source type

DThe router brand

Answer : C

Question 6

Where is a QRadar license obtained?

AX-Force Exchange/license app

BIBM Sales Representative

CQRadar Console

DIBMcom/qradar/licenses

Answer : B

Question 7

What can content management scripts be used to accomplish?

AUpdate QRadar.

BExport content from a QRadar deployment.

CDebug the default configuration in QRadar.

DExtract the list of offenses in QRadar.

Answer : C

IBM Security QRadar SIEM V7.4.3 Deployment C1000-140 Exam Questions