A2150-195 Online Practice Questions and Answers

What is the rule for using the Quick Filter to group terms using logical expressions such as AND, OR, and NOT?

A. The syntax is not case sensitive.

B. The syntax is case sensitive and the operators must be upper case to be recognized as logical expressions and not as search terms.

C. The syntax is case sensitive and the operators must be placed between square brackets to be recognized as logical expressions and not as search terms.

D. The syntax is case sensitive and the operators must be lower case and placed between square brackets to be recognized as logical expressions and not as search terms.

What is a prerequisite to create a report that contains at least one bar chart?

A. Have a color display and enable the JPanel

B. Have the role assigned to create (graphical) reports

C. Choose a search that has accumulated properties for the report

D. The search contained in the report must aggregate the results at least along one property

Offenses can be exported to which two file formats? (Choose two.)

A. RTF

B. XML

C. PDF

D. CSV

E. HTML

Which regex should be used to capture only the domain name blackbox.computerfor all future machine names based on this example?

`Computer=3 8 9.blackbox.computer'

A. Computer= (. *?) \s

B. Computer=389. (.*?)\s

C. Computer=(389\..*?)\s

D. Computer=. *?\. (.*?)\s

Which two components are only part of the IBM Security QRadar V7.0 MR4 (QRadar) SIEM and cannot be found in the QRadar Log Management? (Choose two.)

A. Console

B. Flow Collector

C. Event Collector

D. Event Processor

E. Offense Manager

Which search parameter in the Log Activity tab must be used to filter events by activity (e.g. SSH Login Succeeded)?

A. Category

B. Magnitude

C. User Name

D. Log Source

Click the Exhibit button.

What is the appropriate regex to extract the TirneWritten field value from the payload?

A. Written=.*\s

B. TimeWritten=.*\s

C. (TimeWritten=. *?\s)

D. TimeWritten=(. *?)\s

How can a user quickly reload the default filter in their current tab?

A. Use the View option

B. Use the Display option

C. Clear all the current filters

D. Double-click the Tab button

In the Offense Summary page, which field indicates if an attack was sudden or if the attack occurred over a long period of time?

A. Duration

B. Total Time

C. Attack Length

D. Offense Period

Approximately how many default reports are included in IBM Security QRadar V7.0 MR4?

A. 100

B. 500

C. 1,000

D. 1,500

By default how often is the information on the Dashboard refreshed?

A. Every 30 seconds

B. Every 60 seconds

C. Every 90 seconds

D. Every 120 seconds

Which flow direction would a user specify in order to see flows that are solely related to traffic that originates from the internal networks to external networks?

A. L2L

B. R2L

C. L2R

D. R2R

An IBM Security GRadar V7.0 MR4 (QRadar) user has access to QRadar offenses. How do offenses appear in their My Offenses page?

A. Rules that have been created by the admin and that trigger an offense will also automatically put the triggered offense under their My Offenses page.

B. When the admin accesses the All Offenses option, they select Offenses and drag and drop them to their My Offenses page. Other QRadar users will no longer see the offenses that are put under their My Offenses page.

C. Anyone with access to the Offenses page will see all offenses. Under the My Offenses option, the person will see all offenses that have been assigned to them for further analysis and processing. These offenses are assigned from the All Offenses page by choosing the Assign option from the Action menu.

D. Rules that trigger an offense can also be configured in such way that the resulting offense is automatically assigned to the QRadar user who is notified of the offense by e-mail. The rule is configured to send an e-mail and if the e-mail address matches an e-mail addresse of any of the QRadar users then this offense is automatically added to the My Offenses page of this user.

What are three time range options in the New/Edit search dialog box? (Choose three.)

A. Recent

B. Last Year

C. Real Time

D. Next Week

E. Last Month

F. Specific Interval

On the Offenses tab, which option displays offenses by access, exploit, or malware?

A. By Rules

B. By Category

C. By Definition

D. By Source IP