Practice C1000-156 Exam Online

Question 1

An administrator needs to decommission an App Host. What is the proper order of events to ensure a successful removal?

A : Migrate applications to the Console>Ensure that all applications are working on the Console> Remove the App Host>Shut down the App Host

B : Ensure that all applications are working on the Console>Migrate applications to the Console> Remove the App Host>Shut down the App Host

C : Shut down the App Host>Migrate applications to the Console>Ensure that all applications are working on the Console> Remove the App Host

D : Migrate applications to the Console>Shut down the App Host> Remove the App Host>Shut down the App Host>Ensure that all applications are working on the Console

Answer: A

Question 2

Where are audit logs located?

A : /opt/var/log/audit

B :

/var/audit

C : /var/log/audit

D : /opt/audit/logs

Answer: C

Question 3

An offense remains in a dormant state for __________days.

A : 10

B : 5

C : 15

D : 30

Answer: B

Question 4

Which service is responsible for adding new assets in Qradar ?

A : ecs-ep

B : ecs-ec

C : Asset Profiler

D : Vulnerability Information Server

Answer: C

Question 5

Which framework can be visualized from the Use Case Manager application?

A :

MITRE ATT&CK

B : Lockheed Martin Cyber Kill Chain

C : NIST 800-53

D : Diamond Model of Intrusion Analysis

Answer: A

Name:	IBM Security QRadar SIEM V7.5 Administration
Exam Code:	C1000-156
Certification:	IBM Certified Specialist
Vendor:	IBM
Total Questions:	107
Last Updated:	Apr 24, 2024

IBM C1000-156