Download IBM.C1000-026.BrainDumps.2019-12-05.36q.tqb
| Vendor: | IBM |
| Exam Code: | C1000-026 |
| Exam Name: | IBM Security QRadar SIEM V7.3.2 Fundamental Administration |
| Date: | Dec 05, 2019 |
| File Size: | 145 KB |
Demo Questions
Question 1
An administrator needs to collect logs from the Command Line Interface (CLI).
Which command should the administrator use?
- /opt/bin/qradar/support/get_logs.sh
- /opt/support/get_logs.sh
- /opt/support/qradar/get_logs.sh
- /opt/qradar/support/get_logs.sh
Correct answer: D
Explanation:
Reference: https://www.ibm.com/support/pages/getting-help-what-information-should-be-submitted-qradar-service-request Reference: https://www.ibm.com/support/pages/getting-help-what-information-should-be-submitted-qradar-service-request
Question 2
A QRadar administrator added High Availability (HA) to the Event Processor and needs to verify the crossover link status between the primary and secondary hosts.
Which commands can be used to verify the crossover status? (Choose two.)
- /opt/qradar/ha/bin/ha_getstate.sh
- /opt/qradar/ha/bin/getStatus crossover
- /opt/qradar/ha/bin/qradar_nettune.pl crossover status
- /opt/qradar/ha/bin/qradar_nettune.pl linkaggr <interface> status
- /opt/qradar/ha/bin/ha cstate
- cat /proc/drbd
Correct answer: CF
Explanation:
Reference: https://www.ibm.com/developerworks/community/forums/html/topic?id=5c01c198-016d-461b-a648-a87cdc445768 Reference: https://www.ibm.com/developerworks/community/forums/html/topic?id=5c01c198-016d-461b-a648-a87cdc445768
Question 3
Which event routing rule is required to add QRadar Data Store (QDS) capability to a deployment?
- Log Only (exclude Analytics)
- Delete data When storage space is required
- Bypass Correlation
- Delete data immediately after the retention period has expired
Correct answer: A
Explanation:
Reference: https://www.ibm.com/support/knowledgecenter/en/SS42VS_7.3.2/com.ibm.qradar.doc/t_qradar_adm_data_store.html Reference: https://www.ibm.com/support/knowledgecenter/en/SS42VS_7.3.2/com.ibm.qradar.doc/t_qradar_adm_data_store.html
