IBM Exam C1000-162 Topic 3 Question 21 Discussion

Actual exam question for IBM's C1000-162 exam

Question #: 21
Topic #: 3

[All C1000-162 Questions]

Which log source and protocol combination delivers events to QRadar in real time?

ASophos Enterprise console via JDBC

BMcAfee ePolicy Orchestrator via JDBC

CMcAfee ePolicy Orchestrator via SNMP

DSolaris Basic Security Mode (BSM) via Log File Protocol

Show Suggested Answer

Suggested Answer: C

by Norah at Sep 14, 2024, 11:56 PM

Limited Time Offer

25%

Off

Get Premium C1000-162 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Candra

2 months ago

I'm not sure, but I think A) Sophos Enterprise console via JDBC could also be a valid option.

upvoted 0 times

...

Lizette

2 months ago

I agree with My, SNMP is commonly used for real-time event delivery.

upvoted 0 times

...

Ha! Real time, huh? I bet the answer is option C, McAfee ePolicy Orchestrator via SNMP. You know how SNMP is like the disco of the networking world - it's always trying to get the party started in real time!

upvoted 0 times

Kallie

26 days ago

User 4: Solaris Basic Security Mode (BSM) via Log File Protocol, option D, could also be a good choice for real-time events.

upvoted 0 times

...

Steffanie

1 months ago

User 3: I'm not sure, but option B, McAfee ePolicy Orchestrator via JDBC, sounds promising too.

upvoted 0 times

...

Brett

1 months ago

User 2: Nah, I'm going with option C, McAfee ePolicy Orchestrator via SNMP. SNMP is always on the move!

upvoted 0 times

...

Cortney

1 months ago

I think option A, Sophos Enterprise console via JDBC, might be the one.

upvoted 0 times

...

Chanel

2 months ago

Hmm, I'm not too sure about that. The question is asking for the log source and protocol combination, not just the log source. I think option B, McAfee ePolicy Orchestrator via JDBC, might be the answer.

upvoted 0 times

...

Brittani

2 months ago

I think it's gotta be option A, Sophos Enterprise console via JDBC. That's the only one that says 'real time' in the question.

upvoted 0 times

Kenneth

2 months ago

I'm not sure, but I think the keyword 'real time' in the question points to option A as the correct answer.

upvoted 0 times

...

Magda

2 months ago

But what about option C, McAfee ePolicy Orchestrator via SNMP? Could that also be real-time?

upvoted 0 times

...

Taryn

2 months ago

I agree, option A seems like the best choice for real-time delivery.

upvoted 0 times

...

My

3 months ago

I think the answer is C) McAfee ePolicy Orchestrator via SNMP.

upvoted 0 times

...

IBM Exam C1000-162 Topic 3 Question 21 Discussion

Contribute your Thoughts:

Candra

Lizette

Phil

Kallie

Steffanie

Brett

Cortney

Chanel

Brittani

Kenneth

Magda

Taryn

My