C1000-140 Analyst Practice Questions

A security analyst is configuring QRadar to handle a new data source. Which of the following actions must be taken first?

• AA. Update the data retention policy
• BB. Define the log source type
• CC. Create an API key
• DD. Configure network settings

During a security investigation, an analyst finds that certain logs are missing. What could be a reason for this?

• AA. QRadar is misconfigured
• BB. Logs are rejected at source
• CC. Data retention not set
• DD. Network latency issues

If an analyst wants to visualize security data trends over the past month, which QRadar feature should they use?

• AA. Custom rules
• BB. Dashboard widgets
• CC. Reports
• DD. Log Activity tab