NEW QUESTION 1
Which default Dashboard shows QRadar error messages?

• A. Network Overview
• B. System Monitoring
• C. Application Overview
• D. Threat and Security Monitoring

Answer: B

NEW QUESTION 2
Which metrics are defined for the three virtual appliance system specification (Minimum/Medium/High). (select 4)

• A. NICs
• B. IOPS
• C. Memory
• D. Storage
• E. CPU cores/speed
• F. Maximum Latency
• G. Virtual Networks

Answer: ACEG

NEW QUESTION 3
Which TCP/IP protocols are at layer 4 of the OSI model (Select 2)

• A. TCP
• B. UDP
• C. ARP
• D. ICMP
• E. IGMP

Answer: AB

NEW QUESTION 4
Which is NOT an option for the deployment of the QRader sopftware?

• A. Cloud
• B. Virtual
• C. Live CD/DVD
• D. 3rdParty Appliance

Answer: A

NEW QUESTION 5
What would be relevant questions to ask for scoping the environment? (Select 3)

• A. How many data centers do you have?
• B. How many users will be using QRadar?
• C. How many storage networks to you have?
• D. How many QRadar appliances do you want to acquire?
• E. How many log sources do you want to add to the project?
• F. In how many countries do you want to deploy QRadar?
• G. Which compliance extensions do you need to deploy?

Answer: CFG

NEW QUESTION 6
Which is a valid use case for implementing QRadar reference data collections?

• A. Change all incoming events to add an additional field value.
• B. Provide an index for all data (events and flow data) in real time.
• C. Store hash values and test each incoming hash against this set
• D. Speed up dashboard functions due to caching common widget data sets

Answer: C

NEW QUESTION 7
What are offenses used for?

• A. To track the time spent investigating incidents by an Analyst.
• B. To provide incident statistics based on rule group membership.
• C. To bundle information about a suspicious activity, including events and flows.
• D. To allow the Historical Correlation engine to check for previous occurrences of security incidents

Answer: A

NEW QUESTION 8
What are thesystems called which send events to QRadar?

• A. Assets
• B. Firewalls
• C. Log Sources
• D. Data Backups

Answer: D

NEW QUESTION 9
What does QRadar Incident Forensics do? QRadar Incident Forensics:

• A. analyzes event data for an incident that is discovered by QRadar SI EM.
• B. analyzes flow data for an incident that is discovered by a QRadar SI EM.
• C. brings in the vulnerability data relevant for an incident that is discovered by QRadar SIEM.
• D. aggregates the relevant network data for an incident that is discovered by QRadar SIEM.

Answer: A

NEW QUESTION 10
What is the QRadar 14xx Data Node used for? It is used to:

• A. offload Offense management tasks from a multi-tenant 31 xx appliance.
• B. provide a long term data backup store for 16xx, 17xx, 18xx and 31 xx appliances.
• C. provide additional storage and processing for 16x
• D. 17xx, 18xx and 31 xx appliances.
• E. run complex 'Machine Learning' style applications in the QRadar application framework.

Answer: B

NEW QUESTION 11
Besides a QRadar Console, which additional types of appliance does a typical QRadar Incident Forensics deployment contain?
One or more QRadar Incident Forensics appliances, and:

• A. one or more QRadar Event Collector appliances.
• B. one or more QRadar QFlow Collector appliances.
• C. one or more QRadar Vulnerability Scanner appliances
• D. one or more QRadar Network Packet Capture appliances

Answer: A

NEW QUESTION 12
How can QRadar Network Security improve security posture for companies? By using QRadar Network Security, companies can:

• A. implement an application firewall.
• B. perform event monitoring.
• C. perform vulnerability scanning to detect vulnerabilities.
• D. perform application contro
• E. SSL inspection, and disrupt advanced malware

Answer: A

NEW QUESTION 13
Where do reports get their data from?

• A. Backups
• B. Dashboards
• C. Saved searches
• D. Real-time event data

Answer: C

NEW QUESTION 14
An attacker, who has physical access to the premises, has connected a personal laptop to the network in an attempt to sniff traffic and record any clear text passwords. This scenario would be classified as which type of attack?

• A. Fabrication
• B. Interception
• C. Modification
• D. Interruption

Answer: D

NEW QUESTION 15
Which categorizes a threat to a type of attack?

• A. Sniffin
• B. Interruption
• C. SQL injection, Interception
• D. Man in the middle, Fabrication
• E. Denial of Service, Modification

Answer: B

NEW QUESTION 16
How can assets be used to help in investigations?

• A. As valuable data sources.
• B. Make searching for offenses easier.
• C. Help connect an offense to a device.
• D. Provide external threat intelligence.

Answer: D

NEW QUESTION 17
......