Download IBM.C1000-026.ActualTests.2020-03-20.32q.tqb
| Vendor: | IBM |
| Exam Code: | C1000-026 |
| Exam Name: | IBM Security QRadar SIEM V7.3.2 Fundamental Administration |
| Date: | Mar 20, 2020 |
| File Size: | 130 KB |
Demo Questions
Question 1
An administrator needs to import data into QRadar for a specific use case.
The data that has been provided to the administrator is stored in records that map a key to a value.
Which type of data collection must the administrator create?
- Reference set
- Reference map of sets
- Reference map
- Reference map of maps
Correct answer: B
Explanation:
Reference: https://www.ibm.com/support/knowledgecenter/en/SS42VS_7.3.2/com.ibm.qradar.doc/t_qradar_conifig_rul_resp_reference_set.html Reference: https://www.ibm.com/support/knowledgecenter/en/SS42VS_7.3.2/com.ibm.qradar.doc/t_qradar_conifig_rul_resp_reference_set.html
Question 2
An administrator needs to know if a custom rule is being correlated correctly.
Which QRadar component is responsible for this process?
- QRadar Event Collector
- QRadar Console
- Magistrate
- QRadar Event Processor
Correct answer: D
Explanation:
Reference: https://www.ibm.com/support/pages/qradar-global-correlation Reference: https://www.ibm.com/support/pages/qradar-global-correlation
Question 3
An administrator needs to collect logs from the Command Line Interface (CLI).
Which command should the administrator use?
- /opt/bin/qradar/support/get_logs.sh
- /opt/support/get_logs.sh
- /opt/support/qradar/get_logs.sh
- /opt/qradar/support/get_logs.sh
Correct answer: D
Explanation:
Reference: https://www.ibm.com/support/pages/getting-help-what-information-should-be-submitted-qradar-service-request Reference: https://www.ibm.com/support/pages/getting-help-what-information-should-be-submitted-qradar-service-request
