← Back to exam page

C1000-026 – IBM Security QRadar SIEM V7.3.2 Fundamental Administration

Loading demo links...

Showing 7–8 of 8 questions

Question 7

Which event routing rule is required to add QRadar Data Store (QDS) capability to a deployment?

Select an option, then click Submit answer.

  • ○

    Log Only (exclude Analytics)
  • ○

    Delete data When storage space is required
  • ○

    Bypass Correlation
  • ○

    Delete data immediately after the retention period has expired
Question 8

An administrator needs to collect logs from the Command Line Interface (CLI).

Which command should the administrator use?

Select an option, then click Submit answer.

  • ○

    /opt/bin/qradar/support/get_logs.sh
  • ○

    /opt/support/get_logs.sh
  • ○

    /opt/support/qradar/get_logs.sh
  • ○

    /opt/qradar/support/get_logs.sh