Nest 0 Cart
Nest Account
Popular Exams
All Categories...
Nest
Nest 0
Contact
Log In / Sign Up
Copyright 2024 © store. All rights reserved.
Home IBM C1000-018

IBM C1000-018 Exam Practice Questions (P. 2)

  • Full Access (60 questions)
  • Six months of Premium Access
  • Access to one million comments
  • Seamless ChatGPT Integration
  • Ability to download PDF files
  • Anki Flashcard files for revision
  • No Captcha & No AdSense
  • Advanced Exam Configuration
Get Contributor Access
Question #6
After working with an Offense, an analyst set the Offense as hidden. What does the analyst need to do to view the Offense at a later time?
  1. A
    In the all Offenses view, at the top of the view, select “Show hidden” from the “Select an option” drop-down.
  2. B
    Search for all Offenses owned by the analyst.
  3. C
    Click Clear Filter next to the “Exclude Hidden Offenses”.
  4. D
    In the all Offenses view, select Actions, then select show hidden Offenses.

Correct Answer:
C

Question #7
What is the reason for this system notification?
  1. A
    Deny ntpdate communication on port 423.
  2. B
    Deny ntpdate communication on port 223.
  3. C
    Deny ntpdate communication on port 323.
  4. D
    Deny ntpdate communication on port 123.

Correct Answer:
D

Question #8
When an analyst sees the system notification “The appliance exceeded the EPS or FPM allocation within the last hour”, how does the analyst resolve this issue? (Choose two.)
  1. A
    Delete the volume of events and flows received in the last hour.
  2. B
    Adjust the license pool allocations to increase the EPS and FPM capacity for the appliance.
  3. C
    Tune the system to reduce the volume of events and flows that enter the event pipeline.
  4. D
    Adjust the resource pool allocations to increase the EPS and FPM capacity for the appliance.
  5. E
    Tune the system to reduce the time window from 60 minutes to 30 minutes.

Correct Answer:
BC

Question #9
An analyst is encountering a large number of false positive results. Legitimate internal network traffic contains valid flows and events which are making it difficult to identify true security incidents.
What can the analyst do to reduce these false positive indicators?
  1. A
    Create X-Force rules to detect false positive events.
  2. B
    Create an anomaly rule to detect false positives and suppress the event.
  3. C
    Filter the network traffic to receive only security related events.
  4. D
    Modify rules and/or Building Block to suppress false positive activity.

Correct Answer:
C

Question #10
What is the maximum time period for 3 subsequent events to be coalesced?
  1. A
    10 minutes
  2. B
    10 seconds
  3. C
    5 minutes
  4. D
    60 seconds

Correct Answer:
B

Previous Questions Next Questions

All Pages