IBM C2150-612 Exam Actual Questions

Topic 1 - Single Topic

Question #1 Topic 1

Where can a user add a note to an offense in the user interface?

Correct Answer: B 🗳️
References:
IBM Security QRadar SIEM Users Guide. Page: 34

Question #2 Topic 1

When might a Security Analyst want to review the payload of an event?

A. When immediately after login, the dashboard notifies the analyst of payloads that must be investigated
B. When "Review payload" is added to the offense description automatically by the "System: Notification" rule
C. When the event is associated with an active offense, the payload may contain information that is not normalized or extracted fields
D. When the event is associated with an active offense with a magnitude greater than 5, the payload should be reviewed, otherwise it is not necessary

Reveal Solution Discussion

Correct Answer: C 🗳️

Question #3 Topic 1

Which key elements does the Report Wizard use to help create a report?

Reveal Solution Discussion

Correct Answer: A 🗳️
References:
IBM Security QRadar SIEM Users Guide. Page: 201

Question #4 Topic 1

How is an event magnitude calculated?

A. As the sum of the three properties Severity, Credibility and Relevance of the Event
B. As the sum of the three properties Severity, Credibility and Importance of the Event
C. As a weighted mean of the three properties Severity, Credibility and Relevance of the Event
D. As a weighted mean of the three properties Severity, Credibility and Importance of the Event

Reveal Solution Discussion

Correct Answer: C 🗳️