C1000-026 IBM Security QRadar SIEM V7.3.2 Fundamental Administration Questions and Answers

On the “Log Activity” tab, run the “Deviating Asset Growth: Asset Report event search”

On the Admin Tab, select System Configuration --> Asset Profiler Configuration

Run the ./cleanAssets.sh --list command

On the Asset tab, run the “Clean Assets” action

Filter events of the last 7 days

Filter events of the last month

Filter events of the last 5 minutes

Group by some property

Copy the ISO file extension to the recommended directories and use this file

Use the ISO file to execute the upgrade process

Do a clean installation using the ISO file on a bootable USB device

Copy the SFS file extension to the recommended directories and use this file

Change the Backup Repository Path to the network storage location using the Backup Recovery

Configuration window.

Change the Backup Repository Path by adding a new Network Activity Rule.

Change the Backup Repository Path to the network storage location using the System Settings window.

Configure the new network storage using the Assets Manager

Re-install the QRadar Console

Review the /var/log/qradar.log file for more information

Restart the QRadar Console

Review the /var/log/error.log file for more information

In the System Configuration section of the Admin, access the Asset Profile Configuration and reduce the retention values for the Asset Profiler Retention Configuration and Save. Next, deploy the changes into the environment for the updates to take effect.

In the System Configuration section of the Admin, access the Asset Profile Configuration and increase the retention values for the Asset Profiler Retention Configuration and Save. Next, deploy the changes into the environment for the updates to take effect.

On the navigation menu, click Admin, click the Asset Profile Configuration and reduce the retention values for the Asset Profiler Retention Configuration and Save. On the navigation menu, click Admin and from the Advanced menu, click Restart Event Collection Services. Next, deploy the changes into the environment for the updates to take effect.

In the System Configuration section of the Admin, access the Asset Profile Configuration and increase the retention values for the Asset Profiler Retention Configuration and Save. On the navigation menu, click Admin and from the Advanced menu, click Restart Event Collection Services. Next, deploy the changes into the environment for the updates to take effect.