1149 お客様のコメント
質問 1：
When Should the TLS syslog Protocol be used?
A. When receiving encrypted events
B. When receiving encrypted flows.
C. When receiving clear test events.
D. When receiving clear text flows
正解：A
質問 2：
How does event differ from flow in Qradar?
A. Events handle network packet while flow handle log data
B. Events are records from device that describes an action on network or host and flows
C. events are supports by Qradar while flows are not
D. Events are correlation of network traffic while flows are records from device
正解：B
質問 3：
What statement describes the value QFlow Flow Data Provides, within QRadar
A. QFlow flow data contains calculated file hash data that can be searched or tested in rules
B. QFlow flow data contains high-level and low-level event categorization that can be searched and tested in rule
C. QFlow Flow data contains unencrypted payload content that can be searched or tested in rule
D. QFlow flow data contains vulnerability information that can be searched or tested in rules
正解：C
質問 4：
What is the value of vulnerability scan data, as a data Source in QRadar?
A. Identify and Prioritize potential security issues
B. Identify user behavior activity
C. Collect and parse log source event
D. Correlate logs and network activity
正解：A
When Should the TLS syslog Protocol be used?
A. When receiving encrypted events
B. When receiving encrypted flows.
C. When receiving clear test events.
D. When receiving clear text flows
正解：A
質問 2：
How does event differ from flow in Qradar?
A. Events handle network packet while flow handle log data
B. Events are records from device that describes an action on network or host and flows
C. events are supports by Qradar while flows are not
D. Events are correlation of network traffic while flows are records from device
正解：B
質問 3：
What statement describes the value QFlow Flow Data Provides, within QRadar
A. QFlow flow data contains calculated file hash data that can be searched or tested in rules
B. QFlow flow data contains high-level and low-level event categorization that can be searched and tested in rule
C. QFlow Flow data contains unencrypted payload content that can be searched or tested in rule
D. QFlow flow data contains vulnerability information that can be searched or tested in rules
正解：C
質問 4：
What is the value of vulnerability scan data, as a data Source in QRadar?
A. Identify and Prioritize potential security issues
B. Identify user behavior activity
C. Collect and parse log source event
D. Correlate logs and network activity
正解：A
Suzuki -
本日P1000-017受験しました。合格できました。
こちらの問題集から、9割以上出ました。大変助かりました。