Which type of search uses a structured query language to retrieve specified fields from the events, flows, and simarc tables?A . Add FilterB . Asset SearchC . Quick SearchD . Advanced SearchView AnswerAnswer: D...
Which list is only Rule Actions?A . Modify Credibility; Send SNMP trap; Drop the Detected Event; Dispatch New Event.B . Modify Credibility; Annotate Event; Send to Forwarding Destinations; Dispatch New Event.C . Modify Severity;...
What is a benefit of using a span port, mirror port, or network tap as flow sources for QRadar?A . These sources are marked with a current timestamp.B . These sources show the ASN...
What is the default reason for closing an Offense within QRadar?A . ActionedB . Non-IssueC . Blocked TrafficD . Acceptable TrafficView AnswerAnswer: B Explanation: Reference: https://www.ibm.com/support/knowledgecenter/SS42VS_7.2.1/com.ibm.qradar.doc_7.2.1/t_qradar_closing_offenses.html?pos=2
What is a capability of the Network Hierarchy in QRadar?A . Determining and identifying local and remote hostsB . Capability to move hosts from local to remote network segmentsC . Viewing real-time PCAP traffic...
What is the key difference between Rules and Building Blocks in QRadar?A . Rules have Actions and Responses; Building Blocks do not.B . The Response Limiter is available on Building Blocks but not on...
What is the primary goal of data categorization and normalization in QRadar?A . It allows data from different kinds of devices to be compared.B . It preserves original data allowing for forensic investigations.C ....
Where can a user add a note to an offense in the user interface?A . Dashboard and Offenses TabB . Offenses Tab and Offense Detail WindowC . Offenses Detail Window, Dashboard, and Admin TabD...
When using the right click event filtering functionality on a Source IP, one can filter by “Source IP is not [*]”. Which two other filters can be shown using the right click event filtering...
What are the various timestamps related to a flow?A . First Packet Time, Storage Time, Log Source TimeB . First Packet Time, Storage Time, Last Packet TimeC . First Packet Time, Log Source Time,...
