IBM Exam C1000-162 Topic 5 Question 31 Discussion

Actual exam question for IBM's C1000-162 exam

Question #: 31
Topic #: 5

[All C1000-162 Questions]

Which log source and protocol combination delivers events to QRadar in real time?

ASophos Enterprise console via JDBC

BMcAfee ePolicy Orchestrator via JDBC

CMcAfee ePolicy Orchestrator via SNMP

DSolaris Basic Security Mode (BSM) via Log File Protocol

Show Suggested Answer

Suggested Answer: C

by Karma at Feb 09, 2025, 04:37 PM

Limited Time Offer

25%

Off

Get Premium C1000-162 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Teri

16 days ago

Real-time, schmeal-time. I just want to know which one has the coolest name: 'Solaris Basic Security Mode'. That's got to be the winner, no matter what.

upvoted 0 times

Cordie

6 days ago

A) Sophos Enterprise console via JDBC

upvoted 0 times

...

Elli

25 days ago

Wait, are we sure any of these are real-time? I mean, JDBC and SNMP aren't exactly known for their lightning-fast data delivery.

upvoted 0 times

...

Amina

26 days ago

You guys are overthinking this. The answer is clearly B. McAfee ePolicy Orchestrator via JDBC. That's the most obvious real-time solution here.

upvoted 0 times

Chantell

6 days ago

Yeah, I agree. B is definitely the correct answer for real-time event delivery.

upvoted 0 times

...

Corinne

9 days ago

I think you're right, B does seem like the most obvious choice.

upvoted 0 times

...

Jolanda

29 days ago

Hold up, what if the answer is D? Solaris BSM via Log File Protocol. That could be a real-time option, right? Although, it's a bit of a wild card.

upvoted 0 times

...

Joanne

1 months ago

Hmm, I'm not sure about that. I'm leaning towards option A. Sophos Enterprise console via JDBC. That sounds like it could be real-time too.

upvoted 0 times

Kris

23 hours ago

I'm not sure, but option C also seems like a possibility. McAfee ePolicy Orchestrator via SNMP.

upvoted 0 times

...

Sheridan

5 days ago

I think option B is the correct one. McAfee ePolicy Orchestrator via JDBC.

upvoted 0 times

...

Andree

1 months ago

I'm not sure, but I think A) Sophos Enterprise console via JDBC could also be a valid option.

upvoted 0 times

...

Jerlene

1 months ago

I agree with Justine, SNMP is commonly used for real-time event delivery.

upvoted 0 times

...

Bulah

1 months ago

I think the answer is C. McAfee ePolicy Orchestrator via SNMP. That's the only one that mentions real-time delivery.

upvoted 0 times

Deane

23 days ago

I think so too, let's go with C.

upvoted 0 times

...

Kyoko

24 days ago

I agree, C seems like the correct answer.

upvoted 0 times

...

Justine

1 months ago

I think the answer is C) McAfee ePolicy Orchestrator via SNMP.

upvoted 0 times

...