IBM Security QRadar Risk Manager V7.2.6 Administration: C2150-624

An Administrator working with a IBM Security QRadar SIEM V7.2.8 deployment needs to build an Ariel

Query to find all events data received in the last 24 hours where the magnitude of the events is larger than

1 but smaller than 5.

What Query needs to be used?

A. SELECT * FROM events WHERE magnitude > 1 AND < 5 LAST 1 DAYS

B. SELECT * FROM events WHERE magnitude BETWEEN 1 AND 5 LAST 1 DAYS

C. SELECT * FROM eventstable WHERE magnitude BETWEEN 1 and 5 LAST 1 DAYS

D. SELECT * FROM eventstable WHERE magnitude BETWEEN 1 AND 5 LAST 1 DAYS

An IBM Security QRadar SIEM V7.2.8 Administrator is given a file to import asset information directly to

the asset database.

What should the Administrator be aware of when using this data source?

A. The asset data being imported must contain one field no longer than 255 characters in length.

B. The asset data imported will have a default retention period of 120 days until flow data is received from the asset.

C. The asset reconciliation stage is bypassed and asset updates that are provided by users do not introduce asset growth deviations.

D. The asset data from users are paired with an asset based on a single identifier, the IP address and flow data is never the cause of asset growth deviations.

An Administrator working with a IBM Security QRadar V7.2.8 deployment is looking to add Layer-7 visibility

and data collection. The current deployment is running a QRadar 3128-C Console and has 8Gbps of

network traffic.

What appliance solution would give this customer the results they are looking for?

A. Adding an additional QRadar 3128-C Console

B. Adding two QRadarQFlow Collector 1301 appliances

C. Adding a single QRadarQFlow Collector 1310 SR-C/LR-C

D. Adding two QRadarQFlow Collector 1301 appliances and one QRadarQFlow Collector 1202 appliance