IBM C2150-614 問題集

質問 1：
A customer expanded operations by merging with an acquisition, adding additional traffic. Overall
concerns have surfaced about event collecting, and the Deployment Professional is asked about
deployment costs, security, and resiliency due to the additional network segments. The focus is on
keeping the overall SIEM collecting events as the priority.
Which deployment architecture collection method will meet this need?
A. Shared
B. Distributed
C. Centralized
D. Cluster
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 2：
Two health insurance companies, Company A and Company B, have been involved in a merger. Both
companies have IBM Security QRadar SIEM V7.2.7 implemented to monitor their environments.
It has been determined that Company A will assume the duties of compliance monitoring across the entire
organization. Because of this, Company B will need to forward its events encrypted to Company A's
QRAdar Event Collector.
What is one of the steps that must be done to make sure the information is encrypted in transit?
A. Ensure the SSH private key for the off-site source is available to Company A's Event Collector
B. Ensure the SSH public key for the off-site source is available to Company A's Event Collector
C. Connect Company B's Event Collector to the off-site source
D. Connect Company A's Event Collector to the off-site target
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 3：
A Deployment Professional is performing a new deployment, and the customer wants to monitor network
traffic by sending raw data packets from a network device to IBM Security QRadar SEAM V7.2.7.
Which method should be used?
A. AGP card
B. SFlow protocol
C. Napatech card
D. NetFlow protocol
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 4：
A Deployment Professional working with IBM SecurityQRadar SIEM V7.2.7 is configuring scanners for
dynamic scanning and is working with a customer to explain how dynamic scanning works, presenting the
following example.
Asset IP: 10.2.2.3
Scanner A CIDR: 10.2.2.0/24
Scanner B CIDR: 10.2.2.3/32
How is this asset scanned when utilizing dynamic scanning?
A. Scanner A & B would scan this asset as it is contained within both their CIDRs.
B. Scanner A would scan this asset as it has the bigger CIDR for accuracy.
C. Scanner B would try the scan first then Scanner A would make an attempt.
D. Scanner B would scan this asset as it has the smaller CIDR for accuracy.
正解：B
解説: (Topexam メンバーにのみ表示されます)

質問 5：
After creating a custom Log Source Extension to parse a Source IP address from this event snippet 'IP
Address: (10.20.30.40), the Source IP is not being extracted from the payload.
The Log Source Extension is showing the following:
IP\sAddress:\s\((\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3})
Which Regular Expression should be used to ensure the Source IP is parsed properly?
A. IP\sAddress:\s\((\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}))
B. IP\sAddress:\s\((\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{13})\)
C. IP\sAddress\s\((\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3})\)
D. IP\sAddress:\s\((\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3})\)
正解：A

質問 6：
A Deployment Professional is working with IBM Security QRadar SIEM V7.2.7. for a new customer that is
trying to create their network hierarchy. The customer currently has more than the maximum of 1,000
network objects and CIDR ranges. A few of the CIDRs of the customer are:
Which supernet should be used to shrink the amount of network objects for the supplied group of CIDRs?
A. 209.60.127.0/27
B. 209.60.129.0/23
C. 209.60.128.0/22
D. 209.60.128.0/23
正解：D
解説: (Topexam メンバーにのみ表示されます)