Question 1

A QRadar analyst develops an advanced search on the Log Activity tab and presses the shortcut "Ctrl + Space" in the search field. What information is displayed?

Options :

A : The full list of AQL databases, functions and fields (properties) is displayed.

B : The full list of AQL tables and relationships from a database is displayed.

C : The full list of AOL functions, fields (properties), and keywords is displayed.

D : The full list of AQL functions, tables, and views from a database is displayed.

Answer: A

Question 2

How does a QRadar analyst get to more information about a MITRE entry in the Use Case Manager?

Options :

A : Hover over the entry and read the tooltip

B : Highlight the entry and click the help button

C : Click the Tactic’s Explore icon to reveal and open the MITRE web page

D : Use the Threat Intelligence app

Answer: C

Question 3

What is the name of the data collection set used in QRadar that can be populated with lOCs or other external data?

Options :

A : Index set

B : Reference set

C : IOC set

D : Data set

Answer: B

Question 4

When using the Dynamic Search window on the Admin tab, which two (2) data sources are available?

Options :

A : ASSETS

B : PAYLOAD

C : OFFENSES

D : AOL QUERY

E : SAVED SEARCHES

Answer: A,C

Question 5

Which parameters are used to calculate the magnitude rating of an offense?

Options :

A : Relevance, credibility, time

B : Severity, relevance, credibility

C : Relevance, urgency, credibility

D : Severity, impact, urgency

Answer: B

Higher Test Marks with Free Online C1000-162 Exam Practice

Buying Options: