Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25

- Free Preparation Discussions

IBM C1000-162 Exam - Topic 5 Question 31 Discussion

Actual exam question for IBM's C1000-162 exam

Question #: 31
Topic #: 5

[All C1000-162 Questions]

Which log source and protocol combination delivers events to QRadar in real time?

ASophos Enterprise console via JDBC

BMcAfee ePolicy Orchestrator via JDBC

CMcAfee ePolicy Orchestrator via SNMP

DSolaris Basic Security Mode (BSM) via Log File Protocol

Show Suggested Answer

Suggested Answer: C

by Karma at Feb 09, 2025, 04:37 PM

Limited Time Offer

25%

Off

Get Premium C1000-162 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Svetlana

9 months ago

Agreed, JDBC is the standard for real-time logging!

upvoted 0 times

...

Nan

9 months ago

Wait, are we sure about that? I thought BSM was also a contender.

upvoted 0 times

...

Gwen

9 months ago

Yeah, JDBC is the way to go for real-time events!

upvoted 0 times

...

Nelida

10 months ago

I thought it was SNMP for McAfee, but I could be wrong.

upvoted 0 times

...

Nettie

10 months ago

Definitely McAfee ePolicy Orchestrator via JDBC!

upvoted 0 times

...

Isreal

10 months ago

I remember discussing log sources, but I can't quite recall if Solaris BSM is real-time or not. It feels like a trick option.

upvoted 0 times

...

Andra

10 months ago

I'm not entirely sure, but I feel like McAfee ePolicy Orchestrator is the right choice since it seems to be more integrated with QRadar.

upvoted 0 times

...

Reita

10 months ago

I recall practicing a similar question, and I believe SNMP is typically used for monitoring, so I might lean towards one of the JDBC options.

upvoted 0 times

...

Elouise

11 months ago

I think it's either A or B, but I can't remember which one specifically uses JDBC for real-time events.

upvoted 0 times

...

Ruby

11 months ago

I've got a good feeling about this one. Based on my understanding, the McAfee ePolicy Orchestrator via SNMP option is the most likely to deliver events in real time to QRadar.

upvoted 0 times

...

Ciara

11 months ago

Okay, let me think this through. I believe SNMP is typically used for monitoring and polling, so that's probably not the real-time option. The JDBC and Log File Protocol options seem more promising, but I'll need to double-check the details.

upvoted 0 times

...

Francesco

11 months ago

Hmm, this seems like a tricky one. I'll need to think carefully about the differences between JDBC, SNMP, and Log File Protocol to determine which one delivers events in real time.

upvoted 0 times

...

Marva

11 months ago

I'm not too sure about this one. I know QRadar can integrate with various log sources, but I'm not familiar with the real-time delivery capabilities of each protocol.

upvoted 0 times

...

Teri

1 year ago

Real-time, schmeal-time. I just want to know which one has the coolest name: 'Solaris Basic Security Mode'. That's got to be the winner, no matter what.

upvoted 0 times

Katina

1 year ago

Definitely! It's got a nice ring to it.

upvoted 0 times

...

Garry

1 year ago

Haha, 'Solaris Basic Security Mode' does sound pretty cool!

upvoted 0 times

...

Fallon

1 year ago

D) Solaris Basic Security Mode (BSM) via Log File Protocol

upvoted 0 times

...

Adelle

1 year ago

C) McAfee ePolicy Orchestrator via SNMP

upvoted 0 times

...

Caitlin

1 year ago

B) McAfee ePolicy Orchestrator via JDBC

upvoted 0 times

...

Cordie

1 year ago

A) Sophos Enterprise console via JDBC

upvoted 0 times

...

...

Elli

2 years ago

Wait, are we sure any of these are real-time? I mean, JDBC and SNMP aren't exactly known for their lightning-fast data delivery.

upvoted 0 times

...

Amina

2 years ago

You guys are overthinking this. The answer is clearly B. McAfee ePolicy Orchestrator via JDBC. That's the most obvious real-time solution here.

upvoted 0 times

Chantell

1 year ago

Yeah, I agree. B is definitely the correct answer for real-time event delivery.

upvoted 0 times

...

Corinne

1 year ago

I think you're right, B does seem like the most obvious choice.

upvoted 0 times

...

...

Jolanda

2 years ago

Hold up, what if the answer is D? Solaris BSM via Log File Protocol. That could be a real-time option, right? Although, it's a bit of a wild card.

upvoted 0 times

...

Joanne

2 years ago

Hmm, I'm not sure about that. I'm leaning towards option A. Sophos Enterprise console via JDBC. That sounds like it could be real-time too.

upvoted 0 times

Chaya

1 year ago

I think we can rule out option D. Solaris Basic Security Mode (BSM) via Log File Protocol doesn't seem like a real-time option.

upvoted 0 times

...

Dulce

1 year ago

I agree with you, option A sounds like it could be real-time. Sophos Enterprise console via JDBC.

upvoted 0 times

...

Kris

1 year ago

I'm not sure, but option C also seems like a possibility. McAfee ePolicy Orchestrator via SNMP.

upvoted 0 times

...

Sheridan

1 year ago

I think option B is the correct one. McAfee ePolicy Orchestrator via JDBC.

upvoted 0 times

...

...

Andree

2 years ago

I'm not sure, but I think A) Sophos Enterprise console via JDBC could also be a valid option.

upvoted 0 times

...

Jerlene

2 years ago

I agree with Justine, SNMP is commonly used for real-time event delivery.

upvoted 0 times

...

Bulah

2 years ago

I think the answer is C. McAfee ePolicy Orchestrator via SNMP. That's the only one that mentions real-time delivery.

upvoted 0 times

Deane

2 years ago

I think so too, let's go with C.

upvoted 0 times

...

Kyoko

2 years ago

I agree, C seems like the correct answer.

upvoted 0 times

...

...

Justine

2 years ago

I think the answer is C) McAfee ePolicy Orchestrator via SNMP.

upvoted 0 times

...