IBM C1000-026 問題集

質問 1：
An administrator needs to restore from backup the applications in QRadar.
Which configuration item should the administrator select?
A. Installed Programs Configuration
B. Installed Applications Configuration
C. Backup Installed Applications
D. Installed Applications Backup Configuration
正解：B
解説: (Topexam メンバーにのみ表示されます)

質問 2：
An administrator needs to save the nightly QRadar backups on a network storage.
The administrator has established the connection to the network storage.
What should the administrator do next?
A. Change the Backup Repository Path to the network storage location using the System Settings window.
B. Configure the new network storage using the Assets Manager
C. Change the Backup Repository Path by adding a new Network Activity Rule.
D. Change the Backup Repository Path to the network storage location using the Backup Recovery Configuration window.
正解：D
解説: (Topexam メンバーにのみ表示されます)

質問 3：
Due to regulatory constraints, an administrator must increase the minimum password length and complexity.
In which QRadar section can the administrator change this setting?
A. Admin / System settings
B. Admin / Security profiles
C. Admin / Password policy
D. Admin / Authentication
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 4：
A QRadar upgrade is planned and a maintenance window is scheduled. The administrator must stage the FIXPACK from IBM Fix Central.
Which QRadar FIXPACK file type must the administrator download?
A. RPM
B. IMG
C. SFS
D. XFS
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 5：
An administrator needs to save a search to use it in the dashboards.
To do so, which search feature does the administrator need to select in the "Include in my Dashboard" checkbox?
A. Filter events of the last 5 minutes
B. Filter events of the last 7 days
C. Filter events of the last month
D. Group by some property
正解：D
解説: (Topexam メンバーにのみ表示されます)

質問 6：
An administrator is about to integrate logs from a custom firewall in a QRadar deployment using syslog. The SIEM has two domains, namely Domain A and Domain B.
While reviewing the following sample logs, the administrator notices a "context" keyword:
May 14 11:05:01 192.168.1.23 20190514 11:05:00 context=contextA permit 192.168.1.24 source:
10.10.1.15; source_port: 64094; destination: 10.10.13.34; service: 53; protocol: udp; May 13 12:07:01 192.168.1.23 20190513 11:07:00 context=contextB permit 192.168.1.25 source:
10.10.1.15; source_port: 64094; destination: 10.10.13.34; service: 53; protocol: udp; Which options assign the "contextA" logs to DomainA and the "contextB" logs to domain B? (Choose two.)
A. Create a single log source, create a "Context" custom event property, and assign the log to the correct domain using a custom rule.
B. Create two individual log sources using the context value as log source identifier and assign each log source to the correct domain.
C. Create a single log source, create a "Context" custom event property, and assign the log to both domains using a custom rule.
D. Create two individual log sources by configuring a separated logging instance for each context on the firewall and assign each log source to the correct domain.
E. Create a single log source, create a "Context" custom event property, and assign the log to the correct domain using custom event property value.
正解：B,D