A deployment professional needs to configure the X-Force Threat Intelligence Feed through a web proxy to access the cloud servers hosting the information.
How should the deployment professional configure the proxy for this access?

• A. Reconfigure iptables access on each managed host to provide access to 'update.xforce-security.com' and
  'license.xforce-security.com' and restart some services
• B. Edit the Vetc/httpd/conf.d/ssl.conf and Vopt/qradar/dca/server.ini' files on the Console and restart some services
• C. Complete the 'System Proxy' values in the Advanced System Settings section of the Admin tab
• D. Complete the 'Server Config' values in the Advanced Update Configuration section of Auto Updates )

A deployment professional has been asked to ensure that the system has access to information which can be used by rules to acquire information extracted from a user information source such as Active Directory or LDAP.
Which information repository should the deployment professional store this data in?

• A. Ariel Database
• B. Reference Data
• C. Docker containers
• D. Asset profiles

During an initial deployment, three retention buckets (longret, midret. testret) were configured with the following characteristics, being (X) the number of the bucket:
longret (1): keep data in this bucket for 2 years. Delete when storage is needed.
midret (2): keep data in this bucket for 6 months. Delete when storage is needed.
testret (3): keep data in this bucket for 3 days. Delete immediately after expiration.
Default (0) retention bucket has a 3 months / delete immediately policy.
During testing last week, a significant amount of test data has been mistakenly categorized as "longret". This bucket does not contain any other important information. Everything else, including some important data, has been saved into the default bucket.
How can the deployment professional remove all data stored in the "longret" bucket?

• A. Change the system's time to 2 years in the future and wait until deletion has been made and then go back to the real system's time.
• B. Manually delete old data from last week by issuing a rm * on /store/ariel/events/payloads/ and
  /store/ariel/events/records/ and select the directories containing events from the last week
• C. Change the longret bucket period to 10 days and deploy the changes.
• D. Manually delete the files ending by -1 from /store/ariel/events/payloads/ and /store/ariel/events/records/

A deployment professional needs to install a new QRadar application downloaded from the IBM Security App Exchange.
Which option would the deployment professional select from the QRadar Console GUI under Admin: System Configuration to install the downloaded application?

• A. Extensions Management.
• B. Content Management.
• C. Customization Management.
• D. Application Management.

A systems team has configured their application to send syslog via tcp to a QRadar event collector. The deployment professional has noted that no such logs have arrived for the pre-defined log source.
To troubleshoot this and to prove this traffic has/has not arrived at the event collector, what command can be used from the event collector CLI?
(The Device_Address is an IPv4 address or a host name)

• A. tcpdump -s 0 -A host DeviceAddress and port 514
• B. pcap -s 0 -A host Device Address and port 514
• C. pcap -s 0 -A host Device_Address and udp port 514
• D. tcpdump -s 0 -A host Device Address and udp port 514