MENU
Which log source and protocol combination delivers events to QRadar in real time?
Suggested Answer: C
Get Premium C1000-162 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
36 comments · newest first
SV
Svetlana
10 months ago
Agreed, JDBC is the standard for real-time logging!
NA
Nan
11 months ago
Wait, are we sure about that? I thought BSM was also a contender.
GW
Gwen
11 months ago
Yeah, JDBC is the way to go for real-time events!
NE
Nelida
11 months ago
I thought it was SNMP for McAfee, but I could be wrong.
NE
Nettie
11 months ago
Definitely McAfee ePolicy Orchestrator via JDBC!
IS
Isreal
12 months ago
I remember discussing log sources, but I can't quite recall if Solaris BSM is real-time or not. It feels like a trick option.
AN
Andra
12 months ago
I'm not entirely sure, but I feel like McAfee ePolicy Orchestrator is the right choice since it seems to be more integrated with QRadar.
RE
Reita
12 months ago
I recall practicing a similar question, and I believe SNMP is typically used for monitoring, so I might lean towards one of the JDBC options.
EL
Elouise
1 year ago
I think it's either A or B, but I can't remember which one specifically uses JDBC for real-time events.
RU
Ruby
1 year ago
I've got a good feeling about this one. Based on my understanding, the McAfee ePolicy Orchestrator via SNMP option is the most likely to deliver events in real time to QRadar.
CI
Ciara
1 year ago
Okay, let me think this through. I believe SNMP is typically used for monitoring and polling, so that's probably not the real-time option. The JDBC and Log File Protocol options seem more promising, but I'll need to double-check the details.
FR
Francesco
1 year ago
Hmm, this seems like a tricky one. I'll need to think carefully about the differences between JDBC, SNMP, and Log File Protocol to determine which one delivers events in real time.
MA
Marva
1 year ago
I'm not too sure about this one. I know QRadar can integrate with various log sources, but I'm not familiar with the real-time delivery capabilities of each protocol.
TE
Teri
2 years ago
Real-time, schmeal-time. I just want to know which one has the coolest name: 'Solaris Basic Security Mode'. That's got to be the winner, no matter what.
KA
Katina
2 years ago
Definitely! It's got a nice ring to it.
GA
Garry
2 years ago
Haha, 'Solaris Basic Security Mode' does sound pretty cool!
FA
Fallon
2 years ago
D) Solaris Basic Security Mode (BSM) via Log File Protocol
AD
Adelle
2 years ago
C) McAfee ePolicy Orchestrator via SNMP
CA
Caitlin
2 years ago
B) McAfee ePolicy Orchestrator via JDBC
CO
Cordie
2 years ago
A) Sophos Enterprise console via JDBC
EL
Elli
2 years ago
Wait, are we sure any of these are real-time? I mean, JDBC and SNMP aren't exactly known for their lightning-fast data delivery.
AM
Amina
2 years ago
You guys are overthinking this. The answer is clearly B. McAfee ePolicy Orchestrator via JDBC. That's the most obvious real-time solution here.
CH
Chantell
2 years ago
Yeah, I agree. B is definitely the correct answer for real-time event delivery.
CO
Corinne
2 years ago
I think you're right, B does seem like the most obvious choice.
JO
Jolanda
2 years ago
Hold up, what if the answer is D? Solaris BSM via Log File Protocol. That could be a real-time option, right? Although, it's a bit of a wild card.
JO
Joanne
2 years ago
Hmm, I'm not sure about that. I'm leaning towards option A. Sophos Enterprise console via JDBC. That sounds like it could be real-time too.
CH
Chaya
2 years ago
I think we can rule out option D. Solaris Basic Security Mode (BSM) via Log File Protocol doesn't seem like a real-time option.
DU
Dulce
2 years ago
I agree with you, option A sounds like it could be real-time. Sophos Enterprise console via JDBC.
KR
Kris
2 years ago
I'm not sure, but option C also seems like a possibility. McAfee ePolicy Orchestrator via SNMP.
SH
Sheridan
2 years ago
I think option B is the correct one. McAfee ePolicy Orchestrator via JDBC.
AN
Andree
2 years ago
I'm not sure, but I think A) Sophos Enterprise console via JDBC could also be a valid option.
JE
Jerlene
2 years ago
I agree with Justine, SNMP is commonly used for real-time event delivery.
BU
Bulah
2 years ago
I think the answer is C. McAfee ePolicy Orchestrator via SNMP. That's the only one that mentions real-time delivery.
DE
Deane
2 years ago
I think so too, let's go with C.
KY
Kyoko
2 years ago
I agree, C seems like the correct answer.
JU
Justine
2 years ago
I think the answer is C) McAfee ePolicy Orchestrator via SNMP.