Download IBM.C2150-612.PassCertification.2018-09-22.32q.tqb
| Vendor: | IBM |
| Exam Code: | C2150-612 |
| Exam Name: | IBM Security QRadar SIEM V7.2.6 Associate Analyst |
| Date: | Sep 22, 2018 |
| File Size: | 514 KB |
Demo Questions
Question 1
Where can a user add a note to an offense in the user interface?
- Dashboard and Offenses Tab
- Offenses Tab and Offense Detail Window
- Offenses Detail Window, Dashboard, and Admin Tab
- Dashboard, Offenses Tab, and Offense Detail Window
Correct answer: B
Explanation:
References:IBM Security QRadar SIEM Users Guide. Page: 34 References:
IBM Security QRadar SIEM Users Guide. Page: 34
Question 2
When might a Security Analyst want to review the payload of an event?
- When immediately after login, the dashboard notifies the analyst of payloads that must be investigated
- When “Review payload” is added to the offense description automatically by the “System: Notification” rule
- When the event is associated with an active offense, the payload may contain information that is not normalized or extracted fields
- When the event is associated with an active offense with a magnitude greater than 5, the payload should be reviewed, otherwise it is not necessary
Correct answer: C
Question 3
Which key elements does the Report Wizard use to help create a report?
- Layout, Container, Content
- Container, Orientation, Layout
- Report Classification, Time, Date
- Pagination Option, Orientation, Date
Correct answer: A
Explanation:
References:IBM Security QRadar SIEM Users Guide. Page: 201 References:
IBM Security QRadar SIEM Users Guide. Page: 201
