IBM Security QRadar SIEM V7.3.2 Fundamental Administration

Question 1

An administrator has to change the system hardware clock of the QRadar server. The administrator has already restarted the main services (hostservices, tomcat, hostcontext) and needs to synchronize the QRadar Console time with the QRadar managed hosts.
Which command can the administrator use to accomplish this?

A. /opt/qradar/support/all_servers.sh systemctl restart systemd-timedated.service

B. /opt/qradar/support/all_servers.sh /opt/qradar/bin/time_sync.sh

C. /sbin/hwclock -systohc /opt/qradar/bin/time_sync.sh

D. /opt/qradar/support/all_servers.sh service ntpd restart

Correct Answer: B

Question 2

An administrator plans to deploy multiple log sources that share a common configuration.
How many log sources can be added at one time?

A. 1000

B. 750

C. 250

D. 500

Correct Answer: D

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 3

An administrator needs to restore from backup the applications in QRadar.
Which configuration item should the administrator select?

A. Installed Applications Configuration

B. Installed Applications Backup Configuration

C. Backup Installed Applications

D. Installed Programs Configuration

Correct Answer: A

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 4

An administrator needs to import a list of HR staff logins into a reference set.
Which file type can be used with the import function in the reference set editor window?

A. csv

B. json

C. xls

D. xml

Correct Answer: A

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 5

An administrator has been tasked to run all health checks at once using the DrQ command before a major event happens, such as an upgrade.
What does the DrQ command do?

A. It checks all the available drives on the QRadar managed host and writes the results on a txt file.

B. It runs all available checks in /opt/ibm/si/diagnostiq and writes the results in a txt file.

C. It shows all the available drives on the QRadar managed host.

D. It runs all available checks in /opt/ibm/si/diagnostiq with the checkup mode and with the summary output mode.

Correct Answer: D

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 6

A QRadar administrator added High Availability (HA) to the Event Processor and needs to verify the crossover link status between the primary and secondary hosts.
Which commands can be used to verify the crossover status? (Choose two.)

A. /opt/qradar/ha/bin/qradar_nettune.pl linkaggr <interface> status

B. /opt/qradar/ha/bin/getStatus crossover

C. /opt/qradar/ha/bin/ha_getstate.sh

D. cat /proc/drbd

E. /opt/qradar/ha/bin/qradar_nettune.pl crossover status

F. /opt/qradar/ha/bin/ha cstate

Correct Answer: D,E

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 7

An administrator enabled the base license of QRadar Vulnerability Manager.
How many assets can be scanned using this license?

A. up to 128

B. up to 512

C. up to 256

D. up to 100

Correct Answer: B

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

IBM Security QRadar SIEM V7.3.2 Fundamental Administration - C1000-026 Exam Practice Test

Latest Update

Useful Links

Contact Us