Technical Sales Foundations for IBM Security Intelligence and Analytics V1 (P2150-870) Free Practice Test

Question 1

Which is the most common formatused to send event data to a SIEM?

A. JSON

B. NetFlow

C. LEEF

D. Syslog

Correct Answer: B

Question 2

What does QRadar Incident Forensics do?
QRadar Incident Forensics:

A. aggregates the relevant network data for an incident that is discovered by QRadar SIEM.

B. brings in the vulnerability data relevant for an incident that is discovered by QRadar SIEM.

C. analyzes flow data for an incident that is discovered by a QRadar SI EM.

D. analyzes event data for an incident that is discovered by QRadar SI EM.

Correct Answer: D

Question 3

Which question(s) con QRadar help customers answer concerning the security of their network?

A. What is the security impact?

B. Who is attacking?

C. What is being attacked?

D. When are the attacks taking place?

E. All the above

Correct Answer: D

Question 4

How can assets be used to help in investigations?

A. Provide external threat intelligence.

B. Make searching for offenses easier.

C. As valuable data sources.

D. Help connect an offense to a device.

Correct Answer: A

Welcome to TestSimulate