C1000-055 試験問題を無料オンラインアクセス

A client uses the IBM Security QRadar Vulnerability Manager to discover vulnerabilities on the network devices, applications, and software. They run the QRadar Vulnerability Manager from an All-in-one system, where the scanning and processing functions are on the Console. As the client's QRadar deployment is growing, they are also considering deploying scanners.
What is a valid client motivation for deploying additional scanners?

• A.To avoid scanning through a firewall that is a log source.
• B.To patch assets for their vulnerabilities.
• C.To scan an asset in the same geographic region as the QRadar Vulnerability Manager processor.
• D.To find more vulnerabilities on a given system.

A deployment professional needs to clear out the Asset Database in IBM QRadar. Which service on the Console is restarted when script cleanAssetModel.sh is executed?

• A.Tomcat
• B.Hostcontext
• C.PostgressDB
• D.Hostservices

A deployment professional is creating an architecture for a customer who has locations which regularly go out of contact with the rest of the network. The requirement is to receive logs locally and then have a scheduled connection to QRadar to upload the events.
Which QRadar appliances should be deployed in these locations?

• A.16xx Event Processor with a Store and Forward schedule
• B.31 xx All-in-One with Online Forwarding configured
• C.Disconnected Log Collector with UDP configured
• D.15xx Event Collector with a Store and Forward schedule

A customer is building a big data solution which aims to perform long term analysis of security data. Security events that are processed by QRadar are also relevant for the system and according to the QRadar administrator the most straightforward option for data ingestion is to configure event forwarding on QRadar.
The customer would like to make use of QRadar's parsing capability and its built-in parsers instead of developing new parsers for the big data platform. A deployment professional is asked for advice about the data format to configure for the event forwarding.
Which available option should the deployment professional propose?

• A.Payload
• B.Normalized
• C.XML
• D.JSON

Some customers do not fully understand the benefits of using dedicated appliances to collect events and flows, complaining about the complexity of the deployments.
How should the deployment professional clarify any doubts that may arise?

• A.Dedicated event collectors when deployed in VMs include an on-board event processor that can be directly attached to an All-in-One Virtual console type 3199.
• B.Using All-in-One appliances are a good choice for environments greater than 100.000 EPS.
• C.The operation of the QRadar security intelligence platform consists of three layers, and applies to any QRadar deployment structure, regardless of its size and complexity.
• D.Event Processor collect events from various log sources and continuously forwards these events to an Event Collector.