Question 1

The /store for a QRadar HA setup was migrated to a Fibre Channel device. High Availability is not needed on this cluster, and it needs to be disconnected.

What changes are required before disconnecting the HA cluster in this scenario?

AEdit the /etc/fstab on only the primary HA host to remove the noauto option from /store and /storetmp.

BEdit the /etc/fstab on only the secondary HA host to remove the noauto option from /store and /storetmp.

CEdit the /etc/fstab on the primary HA host and secondary HA host to remove the noauto option from /store and /storetmp.

DNo changes are required before disconnecting the HA cluster.

Answer : C

Question 2

Where does QRadar display R2R events?

AThe Network Activity tab

BThe Remote Services window

CThe Tuning interface in the Use Case Manager app

DThe Testing interface in the Log Source Manager app

Answer : C

Question 3

Where can a deployment professional find updates to DSMs?

AFix Central

BThe QRadar Admin console

CThe Log Source Management app

DQRadar on Cloud website

Answer : D

Question 4

Which log file helps in QRadar troubleshooting?

Aaql.log

Bariel-query.log

Csim-audit.log

Dqradar.error

Answer : C

Question 5

The Server Discovery process updates building blocks based on which of these?

APort-based filtering

BMalware detection

CCMDB integration

DMAC address filtering

Answer : C

Free Practice Questions for IBM C1000-140 Exam

Question 1

Question 2

Question 3

Question 4

Question 5