Exam C2150-614 topic 1 question 20 discussion

Actual exam question from IBM's C2150-614

Question #: 20
Topic #: 1

A current banking customer has just expanded by purchasing a small rural bank with a low bandwidth WAN connection.
The customer wants to expand its current QRadar SIEM 3105 all-in-one deployment to capture log events from the newly acquired branch and to forward them on a schedule, after hours during the trough of activity to the main branch. There is plenty of room for this additional EPS growth.
Which device will meet the requirements?

A. 1202 QFlow Collector
B. 1400 Data Node
C. 1501 Event Collector
D. 1605 Event Processor

Show Suggested Answer

Suggested Answer: D 🗳️
The IBM Security QRadar Event Processor 1605 (MTM 4380-Q1E) appliance is a dedicated event processor that you can scale your QRadar deployment to manage higher EPS rates. The QRadar Event Processor 1605 appliance includes an on-board event collector, event processor, and internal storage for events.
With the Basic License the capacity is 2500 EPS, and with an upgrade license it is 20000 EPS.
Incorrect Answers:
A: The IBM Security QRadar QFlow Collector 1202 (MTM 4380-Q3C) appliance provides high capacity and scalable Layer 7 application data collection for distributed deployments.
B: The IBM Security QRadar 1400 Data Node (MTM 4380-Q1E) appliance provides scalable data storage solution for QRadar deployments. The QRadar 1400
Data Node enhances data retention capabilities of a deployment as well as augment overall query performance.
C: The IBM Security QRadar Event Collector 1501 (MTM 4380-Q2C) appliance is a dedicated event collector. By default, a dedicated event collector collects and parses event from various log sources and continuously forwards these events to an event processor. The capacity is 15000 Events per Second.
References:
http://www.ibm.com/support/knowledgecenter/SS42VS_7.2.6/com.ibm.qradar.doc/c_hwg_evt_prcssr1605.html

by zelesu at April 5, 2025, 9:22 a.m.

Comments

Submit Cancel

Currently there are no comments in this discussion, be the first to comment!