IBM Certified Administrator - Security QRadar SIEM V7.5

Certification Overview

This intermediate level certification is intended for professionals who wish to validate their comprehensive knowledge of IBM Security QRadar SIEM V7.5 Administration.

These administrators will have knowledge and experience in the configuration, performance optimization, tuning, troubleshooting, and system administration for an IBM Security QRadar SIEM V7.5 on-premise deployment. This includes the apps installed with QRadar: Use Case Manager, QRadar Assistant, Log Source Manager, and Pulse, plus a basic understanding of: User Behavior Analytics, QRadar Deployment Intelligence, Reference Data Management. This does not include the SaaS offering QRadar on Cloud (QRoC).

Recommended Skills

Key Areas of Competency

• QRadar troubleshooting
• Searching and reporting
• Rules and building blocks
• Understanding reference data
• Basic QRadar tuning and network hierarchy
• QRadar deployment and component architecture
• Understanding QRadar Event and Flow pipelines
• QRadar user management and data access control
• Basic concepts of multi-domain
• QRadar instances

Prerequisite Knowledge

• Basic security technologies, SIEM concepts, TCP/IP networking, IT security concepts, and IT skills
• Offense and log analysis
• Enterprise logging
• Network monitoring using flows
• QRadar Network Insights, QRadar Incident Forensics

Requirements

• Exam C1000-156 : IBM Security QRadar SIEM V7.5 Administration

Exam Objectives

During exam development, the Subject Matter Experts (SMEs) define all of the tasks, knowledge and experience that an individual would need in order to successfully fulfill their role with the product or solution. These are represented by the objectives below and the questions on the exam are based upon these objectives.

Number of questions : 62

Number of questions to pass : 38

Time allowed : 90 minutes

Status : Live