exam questions

Exam C2150-624 All Questions

View all questions & answers for the C2150-624 exam

Exam C2150-624 topic 1 question 60 discussion

Actual exam question from IBM's C2150-624
Question #: 60
Topic #: 1
[All C2150-624 Questions]

An Administrator working with an IBM Security QRadar SIEM V7.2.8 deployment needs to build an Ariel Query to find all flow data send in the last 24 hours where the amount of bytes being sent and received are larger than 64 bytes.
What Query needs to be used?

  • A. SELECT * FROM flows WHERE sourceBytes > 64 & destinationBytes > 64 LAST 1 DAY
  • B. SELECT * FROM flows WHERE sourceBytes > 64 AND destinationBytes > 64 LAST 1 DAYS
  • C. SELECT * FROM flowsdata WHERE sourceBytes > 64 AND destinationBytes > 64 LAST 1 DAY
  • D. SELECT * FROM flowsdata WHERE sourceBytes > 64 AND destinationBytes > 64 LAST 1 DAYS
Show Suggested Answer Hide Answer
Suggested Answer: B 🗳️
Reference -
https://www.ibm.com/developerworks/community/forums/atom/download/AQLQueryCLIGuide_71.pdf?nodeId=95b7d2b5-f480-4c14-af22-
6a350fb910d2

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Currently there are no comments in this discussion, be the first to comment!
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...