Test Online C1000-162 Dumps Questions to Be Certified

To help prepare for the C1000-162 exam, you may want to consider using C1000-162 exam dumps questions. These questions are designed to test your knowledge and understanding of the topics covered on the exam. The more you practice answering C1000-162 dumps questions, the more comfortable you will become with the exam format and the types of questions you can expect to see. C1000-162 dumps can help reduce anxiety on exam day and improve your chances of success. Go and test free C1000-162 exam dumps questions here.

Page 1 of 2

1. What is the effect of toggling the Global/Local option to Global in a Custom Rule?

It allows a rule to compare events & flows in real time.

It allows a rule to analyze the geographic location of the event source.

It allows rules to be tracked by the central processor for detection by any Event Processor.

It allows a rule to inject new events back into the pipeline to affect and update other incoming events.

 Loading...

2. Which type of rule requires a saved search that must be grouped around a common parameter

Flow Rule

Event Rule

Common Rule

Anomaly Rule

 Loading...

3. Which two (2) types of data can be displayed by default in the Application Overview dashboard?

Login Failures by User {real-time)

Flow Rate (Flows per Second - Peak 1 Min)

Top Applications (Total Bytes)

Outbound Traffic by Country (Total Bytes)

ICMP Type/Code (Total Packets)

 Loading...

4. On the Offenses tab, which column explains the cause of the offense?

Description

Offense Type

Magnitude

IPs

 Loading...

5. How can an analyst search for all events that include the keyword "access"?

Go to the Network Activity tab and run a quick search with the "access" keyword.

Go to the Log Activity tab and run a quick search with the "access" keyword.

Go to the Offenses tab and run a quick search with the "access" keyword.

Go to the Log Activity tab and run this AOL: select * from events where eventname like 'access'.

 Loading...

6. When using the Dynamic Search window on the Admin tab, which two (2) data sources are available?

ASSETS

PAYLOAD

OFFENSES

AOL QUERY

SAVED SEARCHES

 Loading...

7. Which two (2) options are at the top level when an analyst right-clicks on the Source IP or Destination IP that is associated with an offense at the Offense Summary?

Information

DNS Lookup

Navigate

WHOIS Lookup

Asset Summary page

 Loading...

8. What feature in QRadar uses existing asset profile data so administrators can define unknown server types and assign them to a server definition in building blocks and in the network hierarchy?

Server roles

Active servers

Server discovery

Server profiles

 Loading...

9. Reports can be generated by using which file formats in QRadar?

PDF, HTML, XML, XLS

JPG, GIF, BMP, TIF

TXT, PNG, DOC, XML

CSV, XLSX, DOCX, PDF

 Loading...

10. Which two (2) components are necessary for generating a report using the QRadar Report wizard?

Saved search

Dynamic search

Layout

Quick search

Email address

 Loading...

Page 2 of 2

11. QRadar analysts can download different types of content extensions from the IBM X-Force Exchange portal.

Which two (2) types of content extensions are supported by QRadar?

Custom Functions

Events

Flows

FGroup

Offenses

 Loading...

12. Which two (2) types of categories comprise events?

Unsupported

Unfound

Stored

Found

Parsed

 Loading...

13. What happens when you select "False Positive" from the right-click menu in the Log Activity tab?

You can tune out events that are known to be false positives.

You can investigate an IP address or a user name.

Items are filtered that match or do not match the selection.

The selected event is filtered based on the selected parameter in the event.

 Loading...

14. What can be considered a log source type?

ICMP

SNMP

Juniper IOP

Microsoft SMBtail

 Loading...

15. HOTSPOT

New vulnerability scanners are deployed in the company's infrastructure and generate a high number of offenses.

Which function in the Use Case Manager app does an analyst use to update the list of vulnerability scanners?

 Loading...

16. What right-click menu option can an analyst use to find information about an IP or URL?

IBM Advanced Threat lookup

Watson Advisor Al IOC Lookup

QRadar Anomaly lookup

X-Force Exchange Lookup

 Loading...

17. On which lab can an analyst perform a "Flow Bias" Quick Search?

Asset Management app

Log Activity tab

Log Source Management app

Network Activity tab

 Loading...

18. In QRadar. what do event rules test against?

The parameters of an offense to trigger more responses

Incoming log source data that is processed in real time by the QRadar Event Processor

Incoming flow data that is processed by the QRadar Flow Processor

Event and flow data

 Loading...

19. Which parameters are used to calculate the magnitude rating of an offense?

Relevance, credibility, time

Severity, relevance, credibility

Relevance, urgency, credibility

Severity, impact, urgency

 Loading...

20. Which reference set data element attribute governs who can view its value?

Tenant Assignment

Origin

Reference Set Management MSSP

Domain

 Loading...

 Loading...