IBM Technical Sales Foundations for IBM Security Intelligence and Analytics V1 Sample Questions:

1. How does QRadar Advisor with Watson help security analysts investigate security incidents?

A) It extracts packet data for security investigations.
B) It analyzes flow data.
C) It analyzes and investigates an offense.
D) It scans systems for vulnerabilities.

2. What is the unique benefit of moving to QRadar on Cloud?
Customers can now:

A) reduce future capital expense.
B) build much larger QRadar deployments
C) take advantage of QRadar Apps.
D) have access to additional device support modules.

3. What is a difference between rules and building blocks?

A) Rules have responses and Building Blocks do not.
B) Rules can be used for reporting and Building Blocks cannot.
C) Building Blocks only use flows and Rules only use events.
D) Building Blocks have responses and Rules do not.

4. In this diagram, showing the Ariel Search Flow, what is the name of the components as 'X', running on the Console?

A) REST -API endpoint
B) AQL Processor
C) Ariel Proxy Server
D) Ariel Query Server

Solutions: