Question 1

What is the name of the data collection set used in QRadar that can be populated with lOCs or other external data?

Options :

A : Index set

B : Reference set

C : IOC set

D : Data set

Answer: B

Question 2

When using the Dynamic Search window on the Admin tab, which two (2) data sources are available?

Options :

A : ASSETS

B : PAYLOAD

C : OFFENSES

D : AOL QUERY

E : SAVED SEARCHES

Answer: A,C

Question 3

After conducting a thorough analysis, it was discovered that the traffic generated by an attacker targeting one system through many unique events in different categories is legitimate and should not be classified as an offense. Which tuning methodology guideline can be used to tune out this traffic?

Options :

A : Edit the Log Source Management app to tune the category

B : Edit the buildingblocks byusingtheCustomRulesEditor to tune the category

C : Edit the buildingblocks byusingtheCustomRulesEditor to tune the specific event

D : Edit the buildingblocks byusingtheCustomRulesEditor to tune the destinationIP address

Answer: C

Question 4

Which QRadar component provides the user interface that delivers real-time flow views?

Options :

A : QRadar Viewer

B : QRadar Console

C : QRadar Flow Collector

D : QRadar Flow Processor

Answer: B

Question 5

What is the primary use of viewing the Magnitude metric on the Offenses tab?

Options :

A : Determine which events to investigate last.

B : Determine the credibility rating that is configured in the log source.

C : Understand the type of offense we are facing.

D : Identify the importance of the offense in your environment.

Answer: D

Free C1000-162 Mock Exam – Practice Online Confidently

Buying Options: