Question 1

Which parameters are used to calculate the magnitude rating of an offense?

Options :

A : Relevance, credibility, time

B : Severity, relevance, credibility

C : Relevance, urgency, credibility

D : Severity, impact, urgency

Answer: B

Question 2

Which QRadar component provides the user interface that delivers real-time flow views?

Options :

A : QRadar Viewer

B : QRadar Console

C : QRadar Flow Collector

D : QRadar Flow Processor

Answer: B

Question 3

AQRadar analyst can check the rule coverage of MITRE ATT&CK tactics and techniques by using Use Case Manager. In the Use Case Manager app, how can a QRadar analyst check the offenses triggered and mapped to MITRE ATT&CK framework?

Options :

A : By navigating to "CRE Report"

B : From Offenses tab

C : By clicking on "Tuning Home"

D : By navigating to "Detected in timeframe"

Answer: D

Question 4

A Security Analyst has noticed that an offense has been marked inactive. How long had the offense been open since it had last been updated with new events or flows?

Options :

A : 1 day + 30 minutes

B : 5 days + 30 minutes

C : 10 days + 30 minutes

D : 30 days + 30 minutes

Answer: B

Question 5

What is the primary use of viewing the Magnitude metric on the Offenses tab?

Options :

A : Determine which events to investigate last.

B : Determine the credibility rating that is configured in the log source.

C : Understand the type of offense we are facing.

D : Identify the importance of the offense in your environment.

Answer: D

Higher Test Marks with Free Online C1000-162 Exam Practice

Buying Options: