IBM Security QRadar SIEM V7.5 Administration - C1000-156 Exam Questions

QUESTION NO: 1
Which event advanced search query will check an IP address against the Spam X-Force category with a confidence greater than 3?

QUESTION NO: 2
Domain assignments lake precedence over the settings of which other elements from a security profile?

QUESTION NO: 3
What occurs when QRadar reaches the events per second (EPS) or flows per minute (FPM) shared license pool limits?

QUESTION NO: 4
An administrator is evaluating domain criteria based on an event. The result of a regular expression that was defined in a custom property does not match a domain mapping, and the event was automatically assigned to the default domain.
What is the order of precedence if the event does not match the domain definition for custom properties?

QUESTION NO: 5
What Iwo things are required for an administrator to deobfuscate data in QRadar?

QUESTION NO: 6
What is the default day and time setting for when QRadar generates weekly reports?

QUESTION NO: 7
Which user role is defined by default in QRadar?