exam questions

Exam C2150-624 All Questions

View all questions & answers for the C2150-624 exam

Exam C2150-624 topic 1 question 44 discussion

Actual exam question from IBM's C2150-624
Question #: 44
Topic #: 1
[All C2150-624 Questions]

Which appliance of the IBM Security QRadar SIEM V7.2.8 family is a specifically used to gather events from local and remote log sources?

  • A. QRadar Event Console
  • B. QRadar QFlow Collector
  • C. QRadar Event Collector
  • D. QRadar Event Processor
Show Suggested Answer Hide Answer
Suggested Answer: C 🗳️
Explanation -
Gathers events from local and remote log sources. Normalizes raw log source events. During this process, the Magistrate component examines the event from the log source and maps the event to a QRadar Identifier (QID). Then, the Event Collector bundles identical events to conserve system usage and sends the information to the Event Processor.

Reference -
https://www.ibm.com/support/knowledgecenter/SS42VS_7.2.1/com.ibm.qradar.doc_7.2.1/shc_qradar_comps.html

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Currently there are no comments in this discussion, be the first to comment!
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...