Nest 0 Cart
Nest Account
Popular Exams
All Categories...
Nest
Nest 0
Contact
Log In / Sign Up
Copyright 2024 © store. All rights reserved.
Home IBM C1000-018

IBM C1000-018 Exam Practice Questions (P. 5)

  • Full Access (60 questions)
  • Six months of Premium Access
  • Access to one million comments
  • Seamless ChatGPT Integration
  • Ability to download PDF files
  • Anki Flashcard files for revision
  • No Captcha & No AdSense
  • Advanced Exam Configuration
Get Contributor Access
Question #21
Which filter would an analyst apply in the Log Activity tab to get a list of log sources not reporting to QRadar?
  1. A
    Log source status does not equal active
  2. B
    Custom rule equals device stopped sending events
  3. C
    Log source type does not equal active
  4. D
    Log source status does not equal error

Correct Answer:
A

Question #22
The graph below shows a time series of a value. A rule has been created which will trigger at the indicated point.

Which type of QRadar rule has been used?
  1. A
    Common Rule
  2. B
    Threshold Rule
  3. C
    Behavioral Rule
  4. D
    Anomaly Rule

Correct Answer:
B

Question #23
When an Offense is triggered, it only shows the events that triggered the Offense. The analyst wants to investigate further to see more events around the incident, not only those that triggered the Offense. The analyst clicks on the event count and sees the events belonging to the Offense.
How can the analyst proceed to see a more detailed picture of what occurred?
  1. A
    Right-click on the source IP, and choose More Options, then Information, and then Search Events.
  2. B
    Right-click on the destination IP, and choose More Options, then Raw Events.
  3. C
    Right-click on the source IP, and choose View in DSM Editor.
  4. D
    Right-click and filter on the Destination IP.

Correct Answer:
D

Question #24
While creating a new custom property, which is a valid property type selection?
  1. A
    Flow Based
  2. B
    Event Based
  3. C
    AQL Based
  4. D
    Regular Expressions Based

Correct Answer:
D

Question #25
How many normalized timestamp field(s) does an event contain?
  1. A
    2
  2. B
    3
  3. C
    4
  4. D
    1

Correct Answer:
B

Previous Questions Next Questions

All Pages