C1000-026 by IBM Actual Free Exam Q&As

Question 1

An administrator wants to have all QRadar apps running on a new App Host that was configured to have dedicated CPU, storage and memory resources for the Apps. Several issues were presented during the installation of the App Host.
To troubleshoot, what should the administrator check?

A. If IP tables are disabled on the console B. If port 5000 is opened on the console C. If the completion of the /opt/qradar/check_app_host.sh script was successful D. If an IP table entry was already created to allow traffic from the App Host IP

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 2

After fixing the assets that contributed to the asset growth deviation, an administrator needs to find the asset artifacts that have to be cleaned up.
What action should the administrator take to find the artifacts?

A. On the "Log Activity" tab, run the "Deviating Asset Growth: Asset Report event search" B. On the Asset tab, run the "Clean Assets" action C. Run the ./cleanAssets.sh --list command D. On the Admin Tab, select System Configuration --> Asset Profiler Configuration

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 3

An administrator enters the QRadar web console into a web browser but does not get a response.
Which process is responsible for the QRadar GUI?

A. guid B. consoled C. tomcat D. magistrated

Discussion 0

Correct Answer: C Vote an answer

Question 4

An administrator needs to complete the upgrade process from V7.3.1 to V7.3.2.
What is the correct procedure?

A. Use the ISO file to execute the upgrade process B. Copy the ISO file extension to the recommended directories and use this file C. Do a clean installation using the ISO file on a bootable USB device D. Copy the SFS file extension to the recommended directories and use this file

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 5

An administrator has reviewed the list of new features in the QRadar V7.3.2 release notes, and decides to upgrade their system to this version.
What is the minimum supported version that the administrator can upgrade from?

A. 7.3.1 B. 7.2.8 C. 7.3.0 D. 7.2.6

Discussion 0

Correct Answer: D Vote an answer

Question 6

An administrator would like to add a new managed host which uses an existing Network Address Translation (NAT).
Which parameters have to be provided if "Host is NATed" is chosen while adding a managed host?

A. Select NATed network, Enter MAC address of the server or appliance to add B. Select Network Attached Telemetric, Enter MAC address of the server or appliance to add C. Select Network Attached Telemetric, Enter public IP of the server or appliance to add D. Select NATed network, Enter public IP of the server or appliance to add

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 7

An administrator has added a new Event Processor to a QRadar deployment.
How many events per second (EPS) are granted from the temporary license and how many days will those EPS last?

A. 10000 EPS for a 35 day period B. 10000 EPS for a 45 day period C. 5000 EPS for a 35 day period D. 5000 EPS for a 45 day period

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

IBM Security QRadar SIEM V7.3.2 Fundamental Administration - C1000-026 Exam Practice Test