C2150-624

C2150-624 practice questions, page 2 of 3, with answer review and explanations.

Question 6

An Administrators will add a secondary host to an IBM Security QRadar SIEM V7.2.8 Console in a High Availability (HA) deployment scenario. After checking the compatibility between primary and secondary HA pairs, what other prerequisite should the Administrator check within Managed Interfaces?

  1. The shared external storage.
  2. The server certificate that is issued by the local CA.
  3. The existence of an additional distributed file system.
  4. The communication for Distributed Replicated Block Device.

Question 7

An Administrator working with IBM Security QRadar SIEM V7.2.8 needs to delete a single value named User1 from a reference set with the name "Allowed Users" from the command line interface. Which command will accomplish this?

  1. ./UtilReferenceSet.sh purge "Allowed Users" User1
  2. ./ReferenceSetUtil.sh purge "Allowed Users" User1
  3. ./ReferenceSetUtil.sh delete "Allowed\ Users" User1
  4. ./UtilReferenceSet.sh delete "Allowed\ Users" User1

Question 8

When it comes to licensing, what is the difference between Events and Flows and how they are licensed?

  1. Flows are licensed based on overall count over a minute, where Events are licensed based on overall count per second.
  2. Flows are licensed based on overall count per second, where Events are licensed based on overall count over a minute.
  3. Flows and Events are both licensed by overall count per minute under an Upgraded License and per second on a Basic License.
  4. Flows and Events are both licensed by overall count per second under an Upgraded License and per second on a Basic License.

Question 9

When an IBM Security QRadar SIEM V7.2.8 distributed deployment requires scaling horizontally to achieve Event per Second (EPS) requirements, what QRadar Component needs to be added to meet the EPS demands?

  1. Event Manager
  2. Event Indexing
  3. Event Collector
  4. Event Processor

Question 10

The event data collected by IBM Security QRadar SIEM V7.2.8 is being deleted after one month. The legal department required the data be kept for two months. What can the administrator do to accommodate this requirement?

  1. Change the nightly backup Priority to "High".
  2. Change the nightly backup to a monthly backup.
  3. Change the Default Event Retention Policy property field "Do not delete data in this bucket" to two months.
  4. Change the Default Event Retention Policy property field "Keep data placed in this bucket for" to two months.