IBM C2150-612 問題集

質問 1：
When reviewing Network Activity, a flow shows a communication between a local server on port 443, and a random, remote port. The bytes from the local destination host are 2 GB, and the bytes from the remote, source host address are 40KB.
What is the flow bias of this session?
A. Mostly in
B. Mostly out
C. Near-same
D. Other
正解：B

質問 2：
What is an example of the use of a flow data that provides more information than an event data?
A. Represents a single event on the network
B. Automatically identifies and better classifies new assets found on a network
C. Performs near real-time comparisons of application data with logs sent from security devices
D. Represents network activity by normalizing IP addresses ports, byte and packet counts, as well as other details
正解：D
解説: (Topexam メンバーにのみ表示されます)

質問 3：
Which port does HTTP traffic commonly use?
A. Port 80
B. Port 53
C. Port 22
D. Port 443
正解：A

質問 4：
What is a common purpose for looking at flow data?
A. To see application versions installed on a network endpoint
B. To see which users logged into a remote system
C. To see which users were accessing report data in QRadar
D. To see how much information was sent from a desktop to a remote website
正解：D

質問 5：
What is a Device Support Module (DSM) function within QRadar?
A. Scans log information based on a set of rules to output offenses
B. Unites data received from logs
C. Parses event information for SIEM products received from external sources
D. Provides Vendor specific configuration information
正解：C

質問 6：
What is a main function of a Cisco Adaptive Security Appliance (ASA)?
A. A Firewall
B. A Proxy
C. A Switch
D. An Authentication device
正解：A

質問 7：
How does a Device Support Module (DSM) function?
A. A DSM is a configuration file that combines received events from multiple log sources and displays them as offenses in QRadar.
B. A DSM is an installed appliance that parses received events from multiple log sources and converts them to a standard taxonomy format that can be displayed as outputs.
C. A DSM is a configuration file that parses received events from multiple log sources and converts them to a standard taxonomy format that can be displayed as outputs.
D. A DSM is a background service running on the QRadar appliance that reaches out to devices deployed in a network for configuration data.
正解：B