CompTIA
Checkpoint
ISC
HP
Dell
EC-Council
EXIN
Fortinet
ITIL®
Juniper
PMI
Microsoft
VMware
Avaya
Google
Salesforce
Amazon
Palo Alto Networks
Certiport
ISC2
All Vendors
  2. Home
  3. Exams
  4. IBM
  5. C1000-055

Free C1000-055 Exam Braindumps (page: 4)

Page 3 of 16
PDF with 60 Questions

A deployment professional needs to configure the X-Force Threat Intelligence Feed through a web proxy to access the cloud servers hosting the information.
How should the deployment professional configure the proxy for this access?

  1. Edit the Vetc/httpd/conf.d/ssl.conf and Vopt/qradar/dca/server.ini' files on the Console and restart some services
  2. Reconfigure iptables access on each managed host to provide access to 'update.xforce- security.com' and 'license.xforce-security.com' and restart some services
  3. Complete the 'Server Config' values in the Advanced Update Configuration section of Auto Updates )
  4. Complete the 'System Proxy' values in the Advanced System Settings section of the Admin tab

Answer(s): D



A deployment professional is working on integrating an unsupported log source. The log source is able to send events in multiple formats. The administrators of the log source ask which event format should be configured.
Which event format should the deployment professional choose to be able to use direct parsing support in QRadar's DSM editor?

  1. BLOB
  2. Regex
  3. LEEF
  4. SAML

Answer(s): A



During a new deployment, the client states that they want to collect windows logs and forward them to QRadar, but they are already using another agent to collect logs for a managed service provider [MSP] The client would like to continue forwarding these logs to the MSP as well as send them to QRadar.
Which architectural solutions would meet the client's requirements?

  1. Install an unmanaged Wincollect instance and a setup multiple forwarding destinations to the Wincollect configuration server.
  2. Configure windows MSRPC protocol to send events to both.
  3. Install a managed Wincollect instances and setup multiple forwarding destinations.
  4. Configure Windows Event Forwarding to send events to both destinations.

Answer(s): B



A deployment professional needs to check which rules cause events to be dropped on the Console with Pipeline NATIVE_To_MPC messages.
Which script would help with this task?

  1. /opt/qradar/support/findExpensiveCustomProperties.sh
  2. /opt/qradar/support/findExpensiveCustomRules.sh
  3. /opt/qradar/support/astat.sh
  4. /opt/qradar/support/findRules.sh

Answer(s): C






Post your Comments and Discuss IBM C1000-055 exam with other Community members:

C1000-055 Discussions & Posts