IBM Security QRadar

 View Only
  • 1.  Demonstrate your skills by obtaining the new QRadar SIEM Foundation Badge

    Posted Tue August 13, 2019 03:54 PM

    Be skilled ... and show for it

    If you are new to QRadar, and you want to demonstrate your foundational skill level, you can now do so by taking the new IBM QRadar SIEM Foundation Badge test on the IBM Security Learning Academy.


    This is an IBM-issued and IBM-recognized badge that attests that recipients have demonstrated their knowledge of various QRadar deployments architecture and key concepts such as user management, domains and tenants, assets, network hierarchy, flows, events, rules, offenses, reference data, data obfuscation, and reporting.

    The cool thing with this badge is, it is purely based on free educational material available on the Security Learning Academy. The Badge explicitly lists and tracks all the required QRadar courses for you.

    So head out and start building your skill set, take the Badge Quiz, and proof your knowledge by showing off your QRadar Foundations Skill Badge.

    ------------------------------
    Axel Buecker
    IBM Learning Services Specialist
    IT Specialist for Security Architectures
    ------------------------------


  • 2.  RE: Demonstrate your skills by obtaining the new QRadar SIEM Foundation Badge

    Posted Mon September 02, 2019 06:11 AM
    Edited by BrunoMarX Tue September 03, 2019 05:46 AM
    Thank you! The exam is not as easy as expected. In spite of that, I managed to pass it ( with a not so good grade). There are some questions where we should fill the blanks. It is not clear which is a correct answer. For example:

    A *************** ____________ ********************** the Qradar Console.

    Possible correct answers could be: edit, modify, change, delete, re-create...

    Don't know which is the most correct answer in this case.
    In another question we should answer "deduplication", but in the Qradar documentation there is also the word "de-duplication". Are both accepted as valid answers?

    ------------------------------
    Bruno Oliveira
    ------------------------------



  • 3.  RE: Demonstrate your skills by obtaining the new QRadar SIEM Foundation Badge

    Posted Tue September 03, 2019 12:59 AM
    Hi Bruno,
    in this case "Edit" would be the good answer since it's the option you'll find in 'Admin > Users'. It's the term used in the menu. The other words mentionned may mean the same thing, but it's not the exact word you'll find.

    Btw, I hope this is not a real question of the exam or you should remove it from the forum ;)
    Thanks!

    ------------------------------
    Anthony Gayadeen, Videotron Ltd
    Montreal QC
    ------------------------------



  • 4.  RE: Demonstrate your skills by obtaining the new QRadar SIEM Foundation Badge

    Posted Tue September 03, 2019 05:51 AM
    Hi Anthony,

    Thank you! Therefore, I think that a multiple choice question would fit better than this kind of question, since we show that we know (edit, modify, change are all synonyms) but are not sure exactly which word is expected in those blank spaces.

    Regards,
    Bruno

    ------------------------------
    Bruno Oliveira
    ------------------------------



  • 5.  RE: Demonstrate your skills by obtaining the new QRadar SIEM Foundation Badge

    Posted Tue September 03, 2019 11:26 AM
    Thanks so much for your feedback Bruno & Anthony!

    We discussed this type of question (where you have to manually enter/type the answer) in our team quite a bit. We finally decided to keep a few of these in the test (~5 out of a pool of over 100) where the answer is clearly defined by either the user interface or a definition in the manuals.

    I'll keep an eye on the forum and the course feedbacks ... we do adjust our content quite a bit based on feedback. So ... keep it coming :-)

    Cheers …
    Axel

    ------------------------------
    Axel Buecker
    IBM Learning Services Specialist
    IT Specialist for Security Architectures
    ------------------------------



  • 6.  RE: Demonstrate your skills by obtaining the new QRadar SIEM Foundation Badge

    Posted Tue September 03, 2019 03:30 PM

    Hi Axel,
    thanks for clarifying. So, there's a few filling the blank questions in the exam. I'm more on Bruno's side here, where a certification exam should not have this type of question. For someone using Qradar in another language, that will be a real pain to get it right, because when they translate, there's so many synonyms possible as mentioned by Bruno.

    @Bruno: Thanks for the question obfuscation ;)

    Regards,



    ------------------------------
    Anthony Gayadeen, Videotron Ltd
    Montreal QC
    ------------------------------



  • 7.  RE: Demonstrate your skills by obtaining the new QRadar SIEM Foundation Badge

    Posted Fri December 06, 2019 09:14 AM
    "We finally decided to keep a few of these in the test (~5 out of a pool of over 100) where the answer is clearly defined by either the user interface or a definition in the manuals."

    Tried the test twice, and both times there were well over 10  blank space type questions. The last attempt today had 19.

    One of my colleagues got 20... out of 63! I don't understand how anyone can think that this is a good option for any sort of tests, seeing as not everyone has English as their first language. 

    Totally in agreement with Bruno with regards to multiple choice being a superior option. 

    Did get close tho, 50.33/63.00, but not close enough.  


    ------------------------------
    Edmund Johansen
    ------------------------------