Free IBM Security QRadar SIEM V7.5 Administration C1000-156 Exam Practice Test

When configuring a log source, which protocols are used when receiving data into the event ingress component?

• SFTR HTTP Receiver, SNMP
• Syslog, HTTP Receiver, SNMP
• Syslog, FTP Receiver, SNMP
• Syslog, HTTP Receiver, JDBC

What Iwo things are required for an administrator to deobfuscate data in QRadar?

• Public key and the password for the key that is used to obfuscate data
• Private key and the password for the key that is used to obfuscate data
• Private key and public key that is used to obfuscate data
• Public key and the password for the private key that is used to obfuscate data

You analyzed network flows and decided that you want to track any network bandwidth violations by any application that comes from your network source. You want to report on all applications that create traffic and the amount of data (total bytes) from each IP. You want to store the IP address, the application, and the amount of data in the reference data collection.What type of reference data collection must you create to support this use case?

• Reference map
• Reference map of maps
• Reference set
• Reference map of sets

Which two (2) open standards does the QRadar Threat Intelligence app use for feeds?

• TAXII
• AQL
• STIX
• JSON
• OSINT

An administrator opens the Offenses section and goes to Rules to edit the system notification rule. What is the rule name for system notifications?

• System: Notification
• System: Hardware and Software monitoring
• System: Software Notifications
• System: Hardware Notifications

How many vulnerability processors can you have in your deployment?

• 5
• 3
• 10
• 1

An administrator would like to optimize event and flow payload searches for log data that is stored for up to a month. What does an administrator need to do to achieve that requirement?

• Perform a clean on the search model.
• Configure the retention period for property indexes.
• Configure the retention period for payload indexes.
• Configure the retention period for search indexes.

An administrator receives a file with all the vital assets in the company and wants to import this file into QRadar. How must this import file be formatted?

• CSV file in the format: IP address. Name, Weight. Description
• JSON file in the format: IP address. Name, Weight, Domain
• XML file in the format: IP address. Name, Weight, Domain
• XLS file in the format: IP address, Name. Weight, Description

Which profile database does the Server Discovery function use to discover several types of servers on a network?

• Flow profile database
• Network profile database
• Domain profile database
• Asset profile database

What is the REST API interface to install and manage applications that are created by using the GUI Application Framework Software Development Kit?

• /api/gui_app_framework
• /api/data_classification
• /api/system
• /api/siem