Free C1000-162 – IBM Security Systems Practice Test Question

Select all that apply, then click Submit answer.

• ○

  Advanced Persistent Threat (APT)

• ○

  Insider Threat

• ○

  Critical Data Protection

• ○

  Securing the Cloud
  
  

Select an option, then click Submit answer.

• ○

  Average number of results that are received per second.

• ○

  Average number of results that are received per minute.

• ○

  Accumulated number of results that are received per second.

• ○

  Accumulated number of results that are received per minute.
  
  

Select an option, then click Submit answer.

• ○

  Bar Graph

• ○

  Time Series chart

• ○

  Pie Chart

• ○

  Scatter Chart
  
  

Select an option, then click Submit answer.

• ○

  When the source is [local or remote]

• ○

  When the destination is [local or remote]

• ○

  When the event(s) were detected by one or more of [these log sources]

• ○

  When an event matches all of the following [Rules or Building Blocks]
  
  

Select an option, then click Submit answer.

• ○

  To reduce false positives.

• ○

  To narrow a search.

• ○

  To stop receiving events from the host.

• ○

  To close an Offense
  
  

Select an option, then click Submit answer.

• ○

  In the all Offenses view, at the top of the view, select “Show hidden” from the “Select an option” drop-down.

• ○

  Search for all Offenses owned by the analyst.

• ○

  Click Clear Filter next to the “Exclude Hidden Offenses”.

• ○

  In the all Offenses view, select Actions, then select show hidden Offenses.
  
  

Select an option, then click Submit answer.

• ○

  Deny ntpdate communication on port 423.

• ○

  Deny ntpdate communication on port 223.

• ○

  Deny ntpdate communication on port 323.
  

• ○

  Deny ntpdate communication on port 123.
  
  

Select all that apply, then click Submit answer.

• ○

  Delete the volume of events and flows received in the last hour.

• ○

  Adjust the license pool allocations to increase the EPS and FPM capacity for the appliance.

• ○

  Tune the system to reduce the volume of events and flows that enter the event pipeline.

• ○

  Adjust the resource pool allocations to increase the EPS and FPM capacity for the appliance.

• ○

  Tune the system to reduce the time window from 60 minutes to 30 minutes.
  
  

Select an option, then click Submit answer.

• ○

  Create X-Force rules to detect false positive events.

• ○

  Create an anomaly rule to detect false positives and suppress the event.

• ○

  Filter the network traffic to receive only security related events.

• ○

  Modify rules and/or Building Block to suppress false positive activity.
  
  

Select an option, then click Submit answer.

• ○

  10 minutes

• ○

  10 seconds

• ○

  5 minutes

• ○

  60 seconds