最新的IBM Security QRadar SIEM V7.5 Analysis - C1000-162免費考試真題
問題1
Which two high level Event Categories are used by QRadar? (Choose two.)
正確答案: A,B
問題2
What does this example of a YARA rule represent?
rule ibm_forensics : qradar
meta:
description = "Complex Yara rule."
strings:
Shexl = {4D 2B 68 00 ?? 14 99 F9 B? 00 30 Cl 8D}
Sstrl = "IBM Security!"
condition:
Shexl and (#strl > 3)
rule ibm_forensics : qradar
meta:
description = "Complex Yara rule."
strings:
Shexl = {4D 2B 68 00 ?? 14 99 F9 B? 00 30 Cl 8D}
Sstrl = "IBM Security!"
condition:
Shexl and (#strl > 3)
正確答案: D
說明：（僅 VCESoft 成員可見）
問題3
New vulnerability scanners are deployed in the company's infrastructure and generate a high number of offenses. Which function in the Use Case Manager app does an analyst use to update the list of vulnerability scanners?
正確答案:
問題4
What does the Next Run Time column display when a report is queued for generation in QRadar?
正確答案: B
問題5
From which tabs can a QRadar custom rule be created?
正確答案: D
說明：（僅 VCESoft 成員可見）
問題6
Which parameter is calculated based on the relevance, severity, and credibility of an offense?
正確答案: B
說明：（僅 VCESoft 成員可見）
