Download IBM.C1000-026.CertDumps.2021-02-18.60q.tqb
| Vendor: | IBM |
| Exam Code: | C1000-026 |
| Exam Name: | IBM Security QRadar SIEM V7.3.2 Fundamental Administration |
| Date: | Feb 18, 2021 |
| File Size: | 218 KB |
Demo Questions
Question 1
An administrator needs to import data into QRadar for a specific use case.
The data that has been provided to the administrator is stored in records that map a key to a value. Which type of data collection must the administrator create?
- Reference set
- Reference map of sets
- Reference map
- Reference map of maps
Correct answer: B
Question 2
An administrator needs to know if a custom rule is being correlated correctly.
Which QRadar component is responsible for this process?
- QRadar Event Collector
- QRadar Console
- Magistrate
- QRadar Event Processor
Correct answer: D
Question 3
An administrator needs to collect logs from the Command Line Interface (CLI).
Which command should the administrator use?
- /opt/bin/qradar/support/get_logs.sh
- /opt/support/get_logs.sh
- /opt/support/qradar/get_logs.sh
- /opt/qradar/support/get_logs.sh
Correct answer: D
