IBM Exam C1000-140 Topic 12 Question 56 Discussion

Actual exam question for IBM's C1000-140 exam

Question #: 56
Topic #: 12

[All C1000-140 Questions]

A QRadar deployment professional needs to add a managed host to help reduce the load on the QRadar Console.

The managed host should have local storage and also use the QRadar Custom Rule Engine.

Which managed host does the deployment professional add?

AEvent Collector

BApp Host

CDisconnected Log Collector

DEvent Processor

Show Suggested Answer

Suggested Answer: D

by Larae at Mar 06, 2025, 02:47 AM

Limited Time Offer

25%

Off

Get Premium C1000-140 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Lyda

2 months ago

Wait, is this a trick question? Maybe the answer is E) The Incredible Hulk, because he's really good at processing events... and breaking things.

upvoted 0 times

Desiree

1 months ago

C) Disconnected Log Collector

upvoted 0 times

...

Tayna

2 months ago

B) App Host

upvoted 0 times

...

Stephen

2 months ago

A) Event Collector

upvoted 0 times

...

Winifred

2 months ago

I bet the answer is A) Event Collector. It's designed to handle event processing, so it should be able to reduce the load on the Console.

upvoted 0 times

...

Carin

2 months ago

Hmm, I'm not sure about this one. Maybe C) Disconnected Log Collector would work since it has local storage?

upvoted 0 times

Marge

1 months ago

A: Let's go with C) Disconnected Log Collector then. It also uses the QRadar Custom Rule Engine.

upvoted 0 times

...

Malcolm

2 months ago

B: Yeah, that makes sense. It would help reduce the load on the QRadar Console.

upvoted 0 times

...

Lili

2 months ago

A: I think C) Disconnected Log Collector is the right choice because it has local storage.

upvoted 0 times

...

Earleen

2 months ago

I agree with Brynn, a Disconnected Log Collector makes sense for this scenario.

upvoted 0 times

...

Brynn

3 months ago

I think it should be a Disconnected Log Collector for local storage.

upvoted 0 times

...

Graciela

3 months ago

D) Event Processor seems like the logical choice to me. It can handle the load reduction on the QRadar Console.

upvoted 0 times

Kathryn

2 months ago

Event Processor is the managed host that can help with load reduction and utilize the Custom Rule Engine.

upvoted 0 times

...

Kathryn

2 months ago

Event Processor is definitely the way to go, it can handle the local storage and use the Custom Rule Engine.

upvoted 0 times

...

Kathryn

2 months ago

I agree, the Event Processor is the best choice for reducing the load on the QRadar Console.

upvoted 0 times

...

Keshia

3 months ago

I think the answer is B) App Host. It has local storage and can run the Custom Rule Engine.

upvoted 0 times

Dusti

2 months ago

D) Event Processor

upvoted 0 times

...

Janae

2 months ago

C) Disconnected Log Collector

upvoted 0 times

...

Shonda

2 months ago

B) App Host

upvoted 0 times

...

Alonso

2 months ago

A) Event Collector

upvoted 0 times

...

Vincent

3 months ago

I disagree, I believe the managed host should be an App Host.

upvoted 0 times

...

Angella

3 months ago

I think the managed host should be an Event Collector.

upvoted 0 times

...