Note! Following C1000-055 Exam is Retired now. Please select the alternative replacement for your Exam Certification.

C1000-055 Exam Dumps - IBM QRadar SIEM V7.3.2 Deployment

Go to page:

Question # 4

QRadar is configured to periodically update an IP address list from a 3rd party threat intelligence provider using the Threat Intelligence app. The IP address data is used in a CRE rule to create an offense in case a connection attempt toward any IP address on the list is seen.

Which QRadar component stores the collected IP address data?

Building Block

X-Force Threat Feed

Reference Set

Custom Rule

Full Access

Question # 5

A deployment professional decides to improve visibility in the network and successfully installs the Flow Collector.

What should the deployment professional connect the Flow Collector to?

WAN port

SPAN port

LAN port

SAN port

Full Access

Question # 6

A deployment professional is asked to create QRadar deployment architecture for a company.

The company has three branch offices with WAN connection between them. The head office data center requires 14000 EPS and 200000 FPM. Each branch requires 4000 EPS and 200000 FPM.

Which deployment solution will meet the minimum requirements?

QRadar 3105 (Console) in head office + QRadar 1805 Event and Flow Processor in each branch office

QRadar 3129 (Console) in head office + QRadar 1805 Event and Flow Processor in each branch office

QRadar 3105 (Console) and QRadar Event and Flow Processor 1829 in head office + QRadar 1805 Event and Flow Processor in each branch office

QRadar 3129 (All-in-One) in head office

Full Access

Question # 7

A deployment professional needs to clear out the Asset Database in IBM QRadar. Which service on the Console is restarted when script cleanAssetModel.sh is executed?

PostgressDB

Hostcontext

Hostservices

Tomcat

Full Access

Question # 8

An application developer is working on a reporting tool that fetches and visualizes data from multiple data sources. The deployment professional is asked to explain how to make authenticated requests on QRadar using its REST API interface.

Which authentication method is supported by QRadar's REST API?

Authorization token in an HTTP header

Authorization token in an LTPA token

Authorization token in an HTTP query string

Authorization token in an JWT token

Full Access

Go to page: