IBM C2150-624 Exam Actual Questions

Administrators on versions of IBM Security QRadar SIEM older than V7.2.4 must use a specific upgrade path to transition to newer software versions. These requirements are outlined in what technical document?

Correct Answer: C 🗳️
Most of the upgrades of IBM products are available in technical notes. IBM security Qradar SIEM upgrade process and information can be obtained through technical notes that IBM publishes on the web.

Reference -
http://www-01.ibm.com/support/docview.wss?uid=swg27038118

What is a precaution an Administrator should take before beginning an upgrade of IBM Security QRadar SIEM V7.2.8?

Correct Answer: D 🗳️
The first precaution listed in the IBM document states that the administrator should backup data before preparing for software upgrade. Backup of the current settings is important because if anything bad happens during the upgrade, you can always revert back to the original settings.

Reference -
http://www-01.ibm.com/support/docview.wss?uid=swg27048793

After downloading the <QRadar_patchupdate>.sfs file from Fix Central, what is the next step to upgrade IBM Security QRadar SIEM V7.2.8?

Correct Answer: D 🗳️
✑ Download the fix pack to install QRadar 7.2.8 Patch 1 from the IBM Fix Central website: http://www.ibm.com/support/fixcentral/swg/quickorder?parent=IBM%
2BSecurity&product=ibm/Other+software/IBM+Security+QRadar+SIEM&release=7.2.0&platform=Linux&function=fixId&fixids=7.2.8-QRADAR-QRSIEM-
20161118202122&includeRequisites=1&includeSupersedes=0&downloadMethod=http&source=fc
✑ Using SSH, log in to your system as the root user.
✑ Copy the fix pack to the /tmp directory on the QRadar Console. Note: If space in the /tmp directory is limited, copy the fix pack to another location that has sufficient space.
✑ To create the /media/updates directory, type the following command: mkdir -p /media/updates

Reference -
http://www-01.ibm.com/support/docview.wss?uid=swg27049111

An Administrator working with IBM Security QRadar SIEM V7.2.8 needs to enable the PCI report template.
What is the procedure to accomplish this task?

Correct Answer: C 🗳️
1. Click the Reports tab.
2. Clear the Hide Inactive Reports check box.
3. In the Group list, select Compliance > PCI. 4. Select all report templates on the list: a. Click the first report on the list. b. Select all report templates by holding down the Shift key, while you click the last report on the list.
5. In the Actions list, select Toggle Scheduling. 6. Access generated reports: a. From the list in the Generated Reports column, select the time stamp of the report that you want to view. b. In the Format column, click the icon for report format that you want to view.

Reference -
ftp://ftp.software.ibm.com/software/security/products/qradar/documents/7.2.8/en/b_qradar_gs_guide.pdf