C2150-624 Online Practice Questions and Answers

Administrators on versions of IBM Security QRadar SIEM older than V7.2.4 must use a specific upgrade path to transition to newer software versions. These requirements are outlined in what technical document?

A. Fix Level Recommendation Tool

B. IBM latest firmware release notes

C. QRadar Software upgrade progress technical note

D. IBM System Security Interoperation Center (SSIC)

Which is an officially supported operating system for IBM Security QRadar SIEM V7.2.8 installations on customer supplied hardware?

A. Ubuntu Linux

B. Windows 2012

C. Fedora Linux

D. Red Hat Enterprise Linux

Where are system notifications located in IBM Security QRadar SIEM V7.2.8?

A. Only in the Admin Tab -> System Messages.

B. Only on the banner above the QRadar navigation tabs.

C. On the banner above the QRadar navigation tabs or on the System Monitoring dashboard.

D. On the banner above the QRadar navigation tabs or in the Admin Tab -> System Messages.

An Administrator working within IBM Security QRadar SIEM V7.2.8 has a network hierarchy that cannot support anymore network objects. To remedy this, they want to implement a supernet. Some of the customer CIDRs are:

-209.60.128.0/24

-209.60.129.0/24

-209.60.130.0/24

-

209.60.131.0/24

Which supernet should be used to shrink the amount of network objects for the supplied group of CIDRs?

A.

209.60.128.0/22

B.

209.60.129.0/23

C.

209.60.128.0/23

D.

209.60.127.0/27

What are three protocols that collect flow data from network devices, such as routers, and send this data to IBM Security QRadar SIEM V7.2.8?

A. NetFlow, J-Flow and sFlow

B. NetFlow, IPFIX and syslog

C. NetFlow, rsyslog and sFlow

D. NetFlow, Packeteer and syslog

What are the four categories of notifications found in IBM Security QRadar SIEM V7.2.8 system notifications?

A. Errors, Critical, Minor and Information

B. Errors, Warning, Information, and Health

C. Warning, Information, System and Critical

D. Errors, Warning, Information, and Performance

An Administrator working with an IBM Security QRadar SIEM V7.2.8 deployment needs to build an Ariel

Query to find all flow data send in the last 24 hours where the amount of bytes being sent and received are

larger than 64 bytes.

What Query needs to be used?

A. SELECT * FROM flows WHERE sourceBytes> 64 anddestinationBytes> 64 LAST 1 DAY

B. SELECT * FROM flows WHERE sourceBytes> 64 AND destinationBytes> 64 LAST 1 DAYS

C. SELECT * FROM flowsdata WHERE sourceBytes> 64 AND destinationBytes> 64 LAST 1 DAY

D. SELECT * FROM flowsdata WHERE sourceBytes> 64 AND destinationBytes> 64 LAST 1 DAYS

An Administrator working with IBM Security QRadar SIEM V7.2.8 is constantly receiving the following

message:

"MPC: Unable to process offense. The maximum number of offenses has been reached."

What is the reason for this message?

A. The Multi Packet Capturer cannot handle more than 2500 attacks at the same time.

B. The Magistrate Processor Core has more than 2500 active Offenses or 100000 overall Offenses.

C. The Multi Packet Capturer cannot handle more than 500 offense reports at a certain point in time.

D. The Magistrate Processor Core has reached its maximum amount of network connections at a certain time.

An Administrator working with IBM Security QRadar SIEM V7.2.8 wants to view the general statistics of all

hosts in the Distributed Environment.

Where can the Administrator find this information?

A. Admin tab -> System Status -> System Health

B. Admin tab -> General Settings -> System Health

C. Admin tab -> System Configuration -> System Health

D. Admin tab -> System Configuration -> System Statistics

Which two options are available when you create a security profile in IBM Security QRadar SIEM V7.2.8? (Choose two.)

A. Events and Flows

B. Databases and Network

C. Network and Log Sources

D. Log Sources and Databases