A customer is observing the Asset tab on the QRadar console and is getting duplicate assets in the console. What is the reason for this asset duplication? A. There are multiple heterogeneous assets present in environment. B. There are multiple…
A QRadar administrator is developing custom uDSM’s for an unsupported device. Given this event payload: <13> Jan 28 12:57:23 9.77.16.19 AgentDevice=FileForwarder AgentLogFile=logger1.log Payload=January 28,2014 12:53:50 PM GMT+05:30|HOST_CREATE_ERROR|Host{1:testserver40} create failed on array {0:Abc} Which regular expression should the administrator define for…
A customer has configured NetApp storage device to send events to QRadar SIEM. The customer wants an alert to be generated whenever error messages (Improper power supply in the shelf for NetApp device) appear on the console. How can a…
Which icon on the Admin tab do you select when setting up QRadar to use an external authentication method? A. Users B. Authentication C. System Settings D. Authorized Services
In QRadar SIEM, customer wants to tune one of the firewall deny event which shows firewall deny for all events coming from a Syslog Server and has been identified as false positive. The customer clicked on the "false positive" button…
Which statement is correct for patching an HAed server? A. If the Secondary host is in an Active state, the patch should be applied to the Secondary. B. The patch should be applied to the Primary first and the patch…
Which action can be performed on a license key? A. Erase a license key B. Delete a license key C. Unload a license key D. Unallocate a license key
Which statement is true with regard to auto discovery functionality? A. All supported DSMs are auto discovered. B. Only 50 Log Sources can be auto discovered. C. Auto discovered log sources are assigned to a generic log source group. D.…
Which file needs to be installed to patch to QRadar release 7.2.1.xxx? A. 721_QRadar_patchupdate-7.2.1.xxx.iso B. 721_QRadar_patchupdate-7.2.1.xxx.sfs C. 721_QRadar_patchupdate-7.2.1.xxx.md5 D. 721_QRadar_patchupdate-7.2.1.xxx.patch
Which two fields are required to be filled out when adding a new network to the network hierarchy? (Choose two.) A. Group B. Country C. Mail Server D. DNS Server E. IP and CIDR