Download IBM.C2150-624.PracticeTest.2019-02-13.54q.tqb
| Vendor: | IBM |
| Exam Code: | C2150-624 |
| Exam Name: | IBM Security QRadar SIEM V7.2.8 Fundamental Administration |
| Date: | Feb 13, 2019 |
| File Size: | 713 KB |
Demo Questions
Question 1
When an IBM Security QRadar SIEM V7.2.8 distributed deployment requires scaling horizontally to achieve Event per Second (EPS) requirements, what QRadar
Component needs to be added to meet the EPS demands?
- Event Manager
- Event Indexing
- Event Collector
- Event Processor
Correct answer: D
Explanation:
The QRadar SIEM Event Processor Virtual 1699 appliance supports the following items:Up to 10,000 events per second 2 TB or larger dedicated event storage Reference: https://www.ibm.com/support/knowledgecenter/SS42VS_7.2.4/com.ibm.qradar.doc_7.2.4/c_siem_vrt_ap_ov.html The QRadar SIEM Event Processor Virtual 1699 appliance supports the following items:
- Up to 10,000 events per second
- 2 TB or larger dedicated event storage
Reference: https://www.ibm.com/support/knowledgecenter/SS42VS_7.2.4/com.ibm.qradar.doc_7.2.4/c_siem_vrt_ap_ov.html
Question 2
The event data collected by IBM Security QRadar SIEM V7.2.8 is being deleted after one month. The legal department required the data be kept for two months.
What can the administrator do to accommodate this requirement?
- Change the nightly backup Priority to “High”.
- Change the nightly backup to a monthly backup.
- Change the Default Event Retention Policy property field “Do not delete data in this bucket” to two months.
- Change the Default Event Retention Policy property field “Keep data placed in this bucket for” to two months.
Correct answer: D
Explanation:
When storage space is required - Select this option if you want events or flows that match the Keep data placed in this bucket for parameter to remain in storage until the disk monitoring system detects that storage is required. If used disk space reaches 85% for records and 83% for payloads, data will be deleted. Deletion continues until the used disk space reaches 82% for records and 81% for payloads. When storage is required, only events or flows that match the Keep data placed in this bucket for parameter are deleted. Reference: https://www.ibm.com/developerworks/community/forums/atom/download/Event_Flow_Retention_QRadar_72_AdminGuide.pdf?nodeId=593f2b31-a858-4210-b380-4674894a6ad9 When storage space is required - Select this option if you want events or flows that match the Keep data placed in this bucket for parameter to remain in storage until the disk monitoring system detects that storage is required. If used disk space reaches 85% for records and 83% for payloads, data will be deleted. Deletion continues until the used disk space reaches 82% for records and 81% for payloads.
When storage is required, only events or flows that match the Keep data placed in this bucket for parameter are deleted.
Reference: https://www.ibm.com/developerworks/community/forums/atom/download/Event_Flow_Retention_QRadar_72_AdminGuide.pdf?nodeId=593f2b31-a858-4210-b380-4674894a6ad9
Question 3
Which is an officially supported operating system for IBM Security QRadar SIEM V7.2.8 installations on customer supplied hardware?
- Ubuntu Linux
- Windows 2012
- Fedora Linux
- Red Hat Enterprise Linux
Correct answer: D
Explanation:
The IBM Security QRadar Application Framework SDK can be installed on Windows, Linux, or OSX operating system. Reference: ftp://ftp.software.ibm.com/software/security/products/qradar/documents/7.2.8/en/b_qradar_appframework_devguide.pdf The IBM Security QRadar Application Framework SDK can be installed on Windows, Linux, or OSX operating system.
Reference: ftp://ftp.software.ibm.com/software/security/products/qradar/documents/7.2.8/en/b_qradar_appframework_devguide.pdf
