Nest 0 Cart
Nest Account
Popular Exams
All Categories...
Nest
Nest 0
Contact
Log In / Sign Up
Copyright 2024 © store. All rights reserved.
Home IBM C1000-026

IBM C1000-026 Exam Practice Questions (P. 1)

  • Full Access (60 questions)
  • Six months of Premium Access
  • Access to one million comments
  • Seamless ChatGPT Integration
  • Ability to download PDF files
  • Anki Flashcard files for revision
  • No Captcha & No AdSense
  • Advanced Exam Configuration
Get Contributor Access
Question #1
An administrator needs to import data into QRadar for a specific use case.
The data that has been provided to the administrator is stored in records that map a key to a value.
Which type of data collection must the administrator create?
  1. A
    Reference set
  2. B
    Reference map of sets
  3. C
    Reference map
  4. D
    Reference map of maps

Correct Answer:
C
Reference:
https://www.ibm.com/support/knowledgecenter/en/SS42VS_7.3.2/com.ibm.qradar.doc/t_qradar_conifig_rul_resp_reference_set.html

Question #2
An administrator needs to know if a custom rule is being correlated correctly.
Which QRadar component is responsible for this process?
  1. A
    QRadar Event Collector
  2. B
    QRadar Console
  3. C
    Magistrate
  4. D
    QRadar Event Processor

Correct Answer:
D
Reference:
https://www.ibm.com/support/pages/qradar-global-correlation

Question #3
An administrator needs to collect logs from the Command Line Interface (CLI).
Which command should the administrator use?
  1. A
    /opt/bin/qradar/support/get_logs.sh
  2. B
    /opt/support/get_logs.sh
  3. C
    /opt/support/qradar/get_logs.sh
  4. D
    /opt/qradar/support/get_logs.sh

Correct Answer:
D
Reference:
https://www.ibm.com/support/pages/getting-help-what-information-should-be-submitted-qradar-service-request

Question #4
To comply with specific regulations, an administrator has been requested to increase asset retention to 365 days.
In which QRadar section can the administrator find the asset retention settings?
  1. A
    Admin Tab / Asset Retention
  2. B
    Assets Tab / Retention settings
  3. C
    Admin Tab / System settings
  4. D
    Assets Tab / Asset Retention

Correct Answer:
C
Reference:
https://www.ibm.com/support/knowledgecenter/en/SS42VS_7.3.2/com.ibm.qradar.doc/t_qradar_adm_asset_tuning_ip_retention.html

Question #5
A QRadar administrator added High Availability (HA) to the Event Processor and needs to verify the crossover link status between the primary and secondary hosts.
Which commands can be used to verify the crossover status? (Choose two.)
  1. A
    /opt/qradar/ha/bin/ha_getstate.sh
  2. B
    /opt/qradar/ha/bin/getStatus crossover
  3. C
    /opt/qradar/ha/bin/qradar_nettune.pl crossover status
  4. D
    /opt/qradar/ha/bin/qradar_nettune.pl linkaggr <interface> status
  5. E
    /opt/qradar/ha/bin/ha cstate
  6. F
    cat /proc/drbd

Correct Answer:
CE
Reference:
https://www.ibm.com/support/pages/qradar-verifying-ha-crossover-connections-qradarnettunepl

Next Questions

All Pages