000-N24 IBM IBM QRadar Technical Sales Mastery Test v1
QUESTION: 35 What does the ecs process do? A. Control event collection B. Control the GUI C. Contains host vulnerabilities D. Process flow data Answer: A: QUESTION: 36 How do you filter the information that is seen in the Log Activity window? A. Right click the column and select filter. B. Use the dd Filter?button on the toolbar.Use the ?dd Filter?button on the toolbar. C. Write xml wrappers and apply them to the events window. D. Use dit search.?Use ?dit search. E. A, B, and D are correct. Answer: E: QUESTION: 37 What is a custom property? A. A method of defining a regular expression to extract specific data from an event payload. It can be used to display the data in reports and searches and in rules. B. A method of telling QRadar to parse information in a different way and use a different field in the Ariel database to store it. C. A method of renaming a field in an event payload modifying the original data.
You've reached the end of your free preview.
Want to read all 5 pages?
- Fall '20
- Searching, Regular expression, Ave, ave Criteria