How can an administrator configure a rule response to add event data to a reference set?
Answer : A
An administrator opens the Offenses section and goes to Rules to edit the system notification rule.
What is the rule name for system notifications?
Answer : A
Domain assignments take precedence over the settings of which other elements from a security profile?
Answer : B
Which two pieces of information from the MaxMind account must be included in QRadar for geographic data updates? (Choose two.)
Answer : BD
Before configuring a WinCollect log source, which two ports does a Radar administrator ensure are open?
Answer : A
Which two data sources can be assigned to a domain in the Domain Management function? (Choose two.)
Answer : AD
In which QRadar section can the administrator view the license giveback rate?
Answer : C
When using the DSM Editor, which option do you select to separate individual events based on another character, or sequence of characters, so that the event is kept intact as a single multi-line event?
Answer : B
What is the default day and time setting for when QRadar generates weekly reports?
Answer : C
Which command can a QRadar administrator use to connect to the QRadar app container?
Answer : C
You are using the command line interface (CLI) and need to fix a storage issue.
What command do you use to verify disk usage levels?
Answer : D
Which two open standards does the QRadar Threat Intelligence app use for feeds? (Choose two.)
A TAXII
Answer : AE
What is the most restrictive permissions a user needs in order to see all of the events from a particular log source in the Log Activity tab?
Answer : C
How can you configure a log source to provide events to different domains?
Answer : B
A QRadar administrator creates a new saved search in QRadar.
Which option does the administrator enable to allow this search to be opened as the Log Activity tab is opened?
Answer : A
Have any questions or issues ? Please dont hesitate to contact us