P2150-870 Qradar Practice Questions

How does QRadar Advisor with Watson help security analysts investigate security incidents?

• AA. It analyzes flow data.
• BB. It analyzes and investigates an offense.
• CC. It scans systems for vulnerabilities.
• DD. It extracts packet data for security investigations.

What is a benefit of having QRadar on Cloud? IBM is responsible for:

• AA. generating new use cases.
• BB. alerting the user regarding offenses.
• CC. providing 24 hour
• DD. 7 days a week health monitoring and system management of the QRadar Deployment.
• EE. providing health monitoring and system management of the QRadar Deployment during normal business hours only.

Which set of items will be checked by IBM before an App is published in the QRadar App Exchange?

• AA. * Review the App name, version and description* Ensure there is a C&C channel to the App developer.* Run the App to see if it does anything useful.* Change the code so it will function in newer versions of QRadar.
• BB. * Create a Java version of the App* Check for collisions between App page_scripts and QRadar functions.* Verify that the App does not log any information.* Change the code so it will function in newer versions of QRadar.
• CC. * Review all APIcalls.* Ensure that there are no hard-coded values.* Run static analysis on any Python and Javascript code* Execute security tests
• DD. * Automatically deploy/upgrade the App in all QRadar installations* Review the screen-shots and icons in the App.* minimize any App storage usage* Verify the App will create a dashboard widget.

What does QRadar Incident Forensics do? QRadar Incident Forensics:

• AA. analyzes event data for an incident that is discovered by QRadar SI EM.
• BB. analyzes flow data for an incident that is discovered by a QRadar SI EM.
• CC. brings in the vulnerability data relevant for an incident that is discovered by QRadar SIEM.
• DD. aggregates the relevant network data for an incident that is discovered by QRadar SIEM.

How can QRadar Network Security improve security posture for companies? By using QRadar Network Security, companies can:

• AA. implement an application firewall.
• BB. perform event monitoring.
• CC. perform vulnerability scanning to detect vulnerabilities.
• DD. perform application control. SSL inspection, and disrupt advanced malware

Which question(s) con QRadar help customers answer concerning the security of their network?

• AA. Who is attacking?
• BB. What is being attacked?
• CC. What is the security impact?
• DD. When are the attacks taking place?
• EE. All the above

Which attributes would contribute to an effective demonstration of QRadar?

• AA. Bring a whiteboard since prospect might not have one. Show what each tab of the QRadar interface does.
• BB. Show all analysis features on flow data. Focus on the functions that the prospect asked for
• CC. Explain all extension options for add-ons to the prospect. Explain QRadar's architecture and scalability.
• DD. Tell a story on how QRadar solves an issue that is relevant to the prospect. Talk about the benefits of QRadar in relation to the prospect's situation.