Exam Code: C2150-195 (Practice Exam Latest Test Questions VCE PDF)
Exam Name: IBM Security QRadar V7.0 MR4
Certification Provider: IBM
Free Today! Guaranteed Training- Pass C2150-195 Exam.
2021 Apr C2150-195 Study Guide Questions:
Q21. What are vulnerability scanners?
A. It is a tool that is designed to search the network to find open services running.
B. It is an automated process that periodically checks computers for known vulnerabilities.
C. It is a tool to execute known attacks on applications and to check if these applications are vulnerable to these types of attacks.
D. It is a tool that scans a knowledge database for vulnerabilities that may apply to an IT environment as a result of the type of systems available.
Answer: B
Explanation:
Q22. Which steps are required to see hidden offenses in IBM Security QRadar V7.0 MR4 (QRadar)?
A. Contact the QRadar administrator to select Hidden Offenses and then choose the Show option from the Action menu.
B. From the Offenses page, navigate to All Offenses and open the Search menu. Select Edit Search and in the Search Parameters section, uncheckthe box Exclude Hidden Offenses.
C. From the Offenses page, navigate to the Offenses by Category, and click on Show Inactive Categories to display all hidden offenses. Click Hide Inactive Categories to hide them again.
D. Hidden Offenses are no longer associated with Offenses so a custom report and a search should be created that uses a search parameter where Associated with Offense equals False. To create a custom report, navigate to Reports and from the Actions menu select Create.
Answer: B
Explanation:
Q23. When working with rules, why do some rules specify QID values and some specify events?
A. Only low and high level categories can be specified within rules.
B. It is a matter of convention; QIDmap and event names are the same.
C. Event names are more precise; multiple events can be to the same QIDmap entry.
D. QID values are more precise; multiple QIDmap entries can be to same event name.
Answer: D
Explanation:
Latest C2150-195 exam answers:
Q24. How is an asset's weight used?
A. To classify the level of asset activity
B. To define the vulnerability of the asset
C. To determine how much emphasis IBM Security QRadar V7.0 MR4 gives when parsing logs
D. To determine the true severity and relevance of an event when the asset is involved in an offense
Answer: D
Explanation:
Q25. In the Offense Summary page, which field indicates if an attack was sudden or if the attack occurred over a long period of time?
A. Duration
B. Total Time
C. Attack Length
D. Offense Period
Answer: A
Explanation:
Q26. How can the time zone be changed for an existing report?
A. From the Report tab > Actions > select Time Zone
B. Right-click on the Report template > Change Time Zone
C. Select the report from the Reports tab > Options > Change Time Zone
D. Modify the template, under Chart Type select Define > select Time Zone
Answer: D
Explanation:
Verified C2150-195 prep:
Q27. Click the Exhibit button.
What is the appropriate regex to extract the TirneWritten field value from the payload?
A. Written=.*s
B. TimeWritten=.*s
C. (TimeWritten=. *?s)
D. TimeWritten=(. *?)s
Answer: D
Explanation:
Q28. If a user wants to search for Windows user login failures, which high/low level category should be used?
A. Windows/Failures
B. Authentication/Failures
C. Windows/User Login Failures
D. Authentication/User Login Failure
Answer: D
Explanation:
Q29. How does IBM Security QRadar V7.0 MR4 (QRadar) use the information from vulnerability scanners?
A. The internal QRadar vulnerability scanner provides reports for auditors.
B. The results are used by QRadar to automatically patch and update the asset.
C. The information can be used to determine if an asset is vulnerable to an exploit.
D. Systems on which vulnerabilities are found are automatically monitored more closely.
Answer: C
Explanation:
Q30. How can a user display Raw events?
A. View drop-down > Raw Events
B. Action menu > View Raw Events
C. Display drop-down > Raw Events D. Right-click on the events > View Raw Events
Answer: C
Explanation: