C1000-163 by IBM Valid Free Exam Practice Test

Question 1

When multiple repositories are configured for authentication, what must a user do when they log in?

A. Disable the admin account used to map the multiple repositories B. Specify which repository to use for authentication C. Follow the QRadar prompts for the LDAP server to use for authentication D. Specify the server addresses of the multiple repositories in the authentication group

Correct Answer: B

Question 2

Which statement about the Extensions Management tool in QRadar is true?

A. QRadar can be updated by using the Extensions Management tool. B. CSV extensions can be imported into QRadar. C. The Extensions Management tool can be used to add a log source. D. The Extensions Management tool cannot be used to export content out of QRadar.

Correct Answer: D

Question 3

To increase the amount of storage for IBM Security QRadar, data is moved to an offboard storage device.
Which method for adding external storage must be used for /store/ariel?

A. Use NFS (Network File System) for external storage. B. Use iSCSI for external storage. C. /store/ariel/ cannot be moved off of a QRadar appliance. D. Manually copy files at regular intervals.

Correct Answer: D

Question 4

An offense remains in a dormant state for __________days.

A. 15 B. 5 C. 10 D. 30

Correct Answer: B

Question 5

Which two statements are prerequisites for an to upgrade of QRadar? (Choose two.)

A. Verify that all changes are deployed on the appliances. B. Ensure that the ISO file is copied to all the appliances. C. Clean up all the Offenses before any version upgrade. D. Verify that scan runs and reports are complete. E. Ensure an admin account is logged on the UI.

Correct Answer: D,E

Question 6

A deployment professional needs to migrate test rules developed in a test QRadar deployment to a production QRadar deployment.
Which approach can be used to migrate the rules?

A. Use rsync to copy the /store/postgres/ directory that contains configurations. B. Use the Content Management Tool (CMT) to migrate the specific rules. C. Use the Use Case Manager to sync rules between the two deployments. D. Create a configuration backup, copy it to the production system, and import/restore the backup configuration.

Correct Answer: B

Question 7

An organization wants QRadar to have rules, dashboards, and reports to detect and report on cryptocurrency mining activity.
What can be installed in QRadar to meet this requirement?

A. User Behavior Analytics from IBM Security App Exchange B. Content extension from IBM Security App Exchange C. Latest autoupdates from IBM Security Fix Central D. Latest MITRE content from IBM Security Fix Central

Correct Answer: B

Question 8

Which item is an internal flow source?

A. JFLOW/SFLOW B. Netflow C. QRadar Flow Collector D. IPFIX

Correct Answer: C

IBM Security QRadar SIEM V7.5 Deployment - C1000-163 Exam Practice Test