Question 1

An administrator wants to export a list of events to a CSV file. Which items are in the default columns of the search result?

Options :

A : Log Source. Event Count. High Level Category. Related Offense

B : Event Name. Application, Username, Log Source

C : Username. Source Port. Event Count, Magnitude

D : Protocol. Storage Time, Destination Port, Source Port

Answer: A

Question 2

What parameter contributes to the magnitude score of an offense?

Options :

A : Confidentiality

B : Availability

C : Integrity

D : Credibility

Answer: D

Question 3

A QRadar administrator recently installed a QRadar content pack that comes shipped with a custom Pulse dashboard. What does the administrator do to make the new dashboard available in the Pulse application?

Options :

A : Use the Synchronize function of the Pulse app in the Admin tab

B : Use the interactive API to add the dashboard to the list of available dashboards

C : After the administrator installs the content pack, the new dashboard automatically becomes available

D : Run the console script SynchronizePulseDashboards.sh after every content pack installation

Answer: A

Question 4

On a QRadar appliance, you might see a warning that you cannot connect to port 32006. Which command you will use for determining port information?

Options :

A : netstat

B : nc

C : nmap

D : psexec

Answer: A

Question 5

An administrator plans to deploy multiple log sources that share a common configuration. How many log sources can be added at one time?

Options :

A : 750

B : 500

C :

1000

D :

250

Answer: B

Higher Test Marks with Free Online C1000-156 Exam Practice

Buying Options: