IBM Security Qradar SIEM Implementation v 7.2.1: C2150-400

Which character is used for naming subgroups when using the option Add Group in the Network Hierarchy editor?

A. +(plus)

B. . (period)

C. \ (Backslash)

D. /(Forward Slash)

Which two ways does QRadar Vulnerability Manager (QVM) provide examine vulnerability data? (Choose two.)

A. VA Scanner

B. Scan Results

C. Custom Event Rules

D. Manage Vulnerabilities

E. Audit Logs and Audit Events

A QRadar administrator has created a custom rule for investigation of DoS attack on a network using netflow data as well as events coming from a Checkpoint firewall.

Where should the tests be performed to detect this type of unusual activity?

A. Perform tests on offenses to detect unusual activity in your network

B. Perform tests on events and flows to detect unusual activity in your network

C. Perform tests on events, flows and offenses to detect unusual activity in your network

D. Perform tests on the events, flows, offenses and results of saved flow or event searches in your network