IBM QRadar

Be skilled ... and show for it

If you are new to QRadar, and you want to demonstrate your foundational skill level, you can now do so by taking the new IBM QRadar SIEM Foundation Badge test on the IBM Security Learning Academy.


This is an IBM-issued and IBM-recognized badge that attests that recipients have demonstrated their knowledge of various QRadar deployments architecture and key concepts such as user management, domains and tenants, assets, network hierarchy, flows, events, rules, offenses, reference data, data obfuscation, and reporting.

The cool thing with this badge is, it is purely based on free educational material available on the Security Learning Academy. The Badge explicitly lists and tracks all the required QRadar courses for you.

So head out and start building your skill set, take the Badge Quiz, and proof your knowledge by showing off your QRadar Foundations Skill Badge.

------------------------------
Axel Buecker
IBM Learning Services Specialist
IT Specialist for Security Architectures
------------------------------

Thank you! The exam is not as easy as expected. In spite of that, I managed to pass it ( with a not so good grade). There are some questions where we should fill the blanks. It is not clear which is a correct answer. For example:

A *************** ____________ ********************** the Qradar Console.

Possible correct answers could be: edit, modify, change, delete, re-create...

Don't know which is the most correct answer in this case.
In another question we should answer "deduplication", but in the Qradar documentation there is also the word "de-duplication". Are both accepted as valid answers?

------------------------------
Bruno Oliveira
------------------------------

Original Message:
Sent: Tue August 13, 2019 03:53 PM
From: Axel Buecker
Subject: Demonstrate your skills by obtaining the new QRadar SIEM Foundation Badge

Be skilled ... and show for it

If you are new to QRadar, and you want to demonstrate your foundational skill level, you can now do so by taking the new IBM QRadar SIEM Foundation Badge test on the IBM Security Learning Academy.

This is an IBM-issued and IBM-recognized badge that attests that recipients have demonstrated their knowledge of various QRadar deployments architecture and key concepts such as user management, domains and tenants, assets, network hierarchy, flows, events, rules, offenses, reference data, data obfuscation, and reporting.

The cool thing with this badge is, it is purely based on free educational material available on the Security Learning Academy. The Badge explicitly lists and tracks all the required QRadar courses for you.

So head out and start building your skill set, take the Badge Quiz, and proof your knowledge by showing off your QRadar Foundations Skill Badge.

------------------------------
Axel Buecker
IBM Learning Services Specialist
IT Specialist for Security Architectures
------------------------------

Hi Bruno,
in this case "Edit" would be the good answer since it's the option you'll find in 'Admin > Users'. It's the term used in the menu. The other words mentionned may mean the same thing, but it's not the exact word you'll find.

Btw, I hope this is not a real question of the exam or you should remove it from the forum ;)
Thanks!

------------------------------
Anthony Gayadeen, Videotron Ltd
Montreal QC
------------------------------

Original Message:
Sent: Mon September 02, 2019 06:11 AM
From: Bruno Oliveira
Subject: Demonstrate your skills by obtaining the new QRadar SIEM Foundation Badge

Thank you! The exam is not as easy as expected. In spite of that, I managed to pass it ( with a not so good grade). There are some questions where we should fill the blanks. It is not clear which is a correct answer. For example:

An administrative user role cannot ____________ their own account when they are logged in to the Qradar Console.

Possible correct answers could be: edit, modify, change, delete, re-create...

Don't know which is the most correct answer in this case.
In another question we should answer "deduplication", but in the Qradar documentation there is also the word "de-duplication". Are both accepted as valid answers?

------------------------------
Bruno Oliveira

Original Message:
Sent: Tue August 13, 2019 03:53 PM
From: Axel Buecker
Subject: Demonstrate your skills by obtaining the new QRadar SIEM Foundation Badge

Be skilled ... and show for it

If you are new to QRadar, and you want to demonstrate your foundational skill level, you can now do so by taking the new IBM QRadar SIEM Foundation Badge test on the IBM Security Learning Academy.

This is an IBM-issued and IBM-recognized badge that attests that recipients have demonstrated their knowledge of various QRadar deployments architecture and key concepts such as user management, domains and tenants, assets, network hierarchy, flows, events, rules, offenses, reference data, data obfuscation, and reporting.

The cool thing with this badge is, it is purely based on free educational material available on the Security Learning Academy. The Badge explicitly lists and tracks all the required QRadar courses for you.

So head out and start building your skill set, take the Badge Quiz, and proof your knowledge by showing off your QRadar Foundations Skill Badge.

------------------------------
Axel Buecker
IBM Learning Services Specialist
IT Specialist for Security Architectures
------------------------------

Hi Anthony,

Thank you! Therefore, I think that a multiple choice question would fit better than this kind of question, since we show that we know (edit, modify, change are all synonyms) but are not sure exactly which word is expected in those blank spaces.

Regards,
Bruno

------------------------------
Bruno Oliveira
------------------------------

Original Message:
Sent: Tue September 03, 2019 12:59 AM
From: Anthony Gayadeen
Subject: Demonstrate your skills by obtaining the new QRadar SIEM Foundation Badge

Hi Bruno,
in this case "Edit" would be the good answer since it's the option you'll find in 'Admin > Users'. It's the term used in the menu. The other words mentionned may mean the same thing, but it's not the exact word you'll find.

Btw, I hope this is not a real question of the exam or you should remove it from the forum ;)
Thanks!

------------------------------
Anthony Gayadeen, Videotron Ltd
Montreal QC

Original Message:
Sent: Mon September 02, 2019 06:11 AM
From: Bruno Oliveira
Subject: Demonstrate your skills by obtaining the new QRadar SIEM Foundation Badge

Thank you! The exam is not as easy as expected. In spite of that, I managed to pass it ( with a not so good grade). There are some questions where we should fill the blanks. It is not clear which is a correct answer. For example:

An administrative user role cannot ____________ their own account when they are logged in to the Qradar Console.

Possible correct answers could be: edit, modify, change, delete, re-create...

Don't know which is the most correct answer in this case.
In another question we should answer "deduplication", but in the Qradar documentation there is also the word "de-duplication". Are both accepted as valid answers?

------------------------------
Bruno Oliveira

Original Message:
Sent: Tue August 13, 2019 03:53 PM
From: Axel Buecker
Subject: Demonstrate your skills by obtaining the new QRadar SIEM Foundation Badge

Be skilled ... and show for it

If you are new to QRadar, and you want to demonstrate your foundational skill level, you can now do so by taking the new IBM QRadar SIEM Foundation Badge test on the IBM Security Learning Academy.

This is an IBM-issued and IBM-recognized badge that attests that recipients have demonstrated their knowledge of various QRadar deployments architecture and key concepts such as user management, domains and tenants, assets, network hierarchy, flows, events, rules, offenses, reference data, data obfuscation, and reporting.

The cool thing with this badge is, it is purely based on free educational material available on the Security Learning Academy. The Badge explicitly lists and tracks all the required QRadar courses for you.

So head out and start building your skill set, take the Badge Quiz, and proof your knowledge by showing off your QRadar Foundations Skill Badge.

------------------------------
Axel Buecker
IBM Learning Services Specialist
IT Specialist for Security Architectures
------------------------------

Thanks so much for your feedback Bruno & Anthony!

We discussed this type of question (where you have to manually enter/type the answer) in our team quite a bit. We finally decided to keep a few of these in the test (~5 out of a pool of over 100) where the answer is clearly defined by either the user interface or a definition in the manuals.

I'll keep an eye on the forum and the course feedbacks ... we do adjust our content quite a bit based on feedback. So ... keep it coming :-)

Cheers …
Axel

------------------------------
Axel Buecker
IBM Learning Services Specialist
IT Specialist for Security Architectures
------------------------------

Original Message:
Sent: Tue September 03, 2019 05:51 AM
From: Bruno Oliveira
Subject: Demonstrate your skills by obtaining the new QRadar SIEM Foundation Badge

Hi Anthony,

Thank you! Therefore, I think that a multiple choice question would fit better than this kind of question, since we show that we know (edit, modify, change are all synonyms) but are not sure exactly which word is expected in those blank spaces.

Regards,
Bruno

------------------------------
Bruno Oliveira

Original Message:
Sent: Tue September 03, 2019 12:59 AM
From: Anthony Gayadeen
Subject: Demonstrate your skills by obtaining the new QRadar SIEM Foundation Badge

Hi Bruno,
in this case "Edit" would be the good answer since it's the option you'll find in 'Admin > Users'. It's the term used in the menu. The other words mentionned may mean the same thing, but it's not the exact word you'll find.

Btw, I hope this is not a real question of the exam or you should remove it from the forum ;)
Thanks!

------------------------------
Anthony Gayadeen, Videotron Ltd
Montreal QC

Original Message:
Sent: Mon September 02, 2019 06:11 AM
From: Bruno Oliveira
Subject: Demonstrate your skills by obtaining the new QRadar SIEM Foundation Badge

Thank you! The exam is not as easy as expected. In spite of that, I managed to pass it ( with a not so good grade). There are some questions where we should fill the blanks. It is not clear which is a correct answer. For example:

An administrative user role cannot ____________ their own account when they are logged in to the Qradar Console.

Possible correct answers could be: edit, modify, change, delete, re-create...

Don't know which is the most correct answer in this case.
In another question we should answer "deduplication", but in the Qradar documentation there is also the word "de-duplication". Are both accepted as valid answers?

------------------------------
Bruno Oliveira

Original Message:
Sent: Tue August 13, 2019 03:53 PM
From: Axel Buecker
Subject: Demonstrate your skills by obtaining the new QRadar SIEM Foundation Badge

Be skilled ... and show for it

If you are new to QRadar, and you want to demonstrate your foundational skill level, you can now do so by taking the new IBM QRadar SIEM Foundation Badge test on the IBM Security Learning Academy.

This is an IBM-issued and IBM-recognized badge that attests that recipients have demonstrated their knowledge of various QRadar deployments architecture and key concepts such as user management, domains and tenants, assets, network hierarchy, flows, events, rules, offenses, reference data, data obfuscation, and reporting.

The cool thing with this badge is, it is purely based on free educational material available on the Security Learning Academy. The Badge explicitly lists and tracks all the required QRadar courses for you.

So head out and start building your skill set, take the Badge Quiz, and proof your knowledge by showing off your QRadar Foundations Skill Badge.

------------------------------
Axel Buecker
IBM Learning Services Specialist
IT Specialist for Security Architectures
------------------------------

Hi Axel,
thanks for clarifying. So, there's a few filling the blank questions in the exam. I'm more on Bruno's side here, where a certification exam should not have this type of question. For someone using Qradar in another language, that will be a real pain to get it right, because when they translate, there's so many synonyms possible as mentioned by Bruno.

@Bruno: Thanks for the question obfuscation ;)

Regards,

------------------------------
Anthony Gayadeen, Videotron Ltd
Montreal QC
------------------------------

Original Message:
Sent: Tue September 03, 2019 11:25 AM
From: Axel Buecker
Subject: Demonstrate your skills by obtaining the new QRadar SIEM Foundation Badge

Thanks so much for your feedback Bruno & Anthony!

We discussed this type of question (where you have to manually enter/type the answer) in our team quite a bit. We finally decided to keep a few of these in the test (~5 out of a pool of over 100) where the answer is clearly defined by either the user interface or a definition in the manuals.

I'll keep an eye on the forum and the course feedbacks ... we do adjust our content quite a bit based on feedback. So ... keep it coming :-)

Cheers …
Axel

------------------------------
Axel Buecker
IBM Learning Services Specialist
IT Specialist for Security Architectures

Original Message:
Sent: Tue September 03, 2019 05:51 AM
From: Bruno Oliveira
Subject: Demonstrate your skills by obtaining the new QRadar SIEM Foundation Badge

Hi Anthony,

Thank you! Therefore, I think that a multiple choice question would fit better than this kind of question, since we show that we know (edit, modify, change are all synonyms) but are not sure exactly which word is expected in those blank spaces.

Regards,
Bruno

------------------------------
Bruno Oliveira

Original Message:
Sent: Tue September 03, 2019 12:59 AM
From: Anthony Gayadeen
Subject: Demonstrate your skills by obtaining the new QRadar SIEM Foundation Badge

Hi Bruno,
in this case "Edit" would be the good answer since it's the option you'll find in 'Admin > Users'. It's the term used in the menu. The other words mentionned may mean the same thing, but it's not the exact word you'll find.

Btw, I hope this is not a real question of the exam or you should remove it from the forum ;)
Thanks!

------------------------------
Anthony Gayadeen, Videotron Ltd
Montreal QC

Original Message:
Sent: Mon September 02, 2019 06:11 AM
From: Bruno Oliveira
Subject: Demonstrate your skills by obtaining the new QRadar SIEM Foundation Badge

Thank you! The exam is not as easy as expected. In spite of that, I managed to pass it ( with a not so good grade). There are some questions where we should fill the blanks. It is not clear which is a correct answer. For example:

An administrative user role cannot ____________ their own account when they are logged in to the Qradar Console.

Possible correct answers could be: edit, modify, change, delete, re-create...

Don't know which is the most correct answer in this case.
In another question we should answer "deduplication", but in the Qradar documentation there is also the word "de-duplication". Are both accepted as valid answers?

------------------------------
Bruno Oliveira

Original Message:
Sent: Tue August 13, 2019 03:53 PM
From: Axel Buecker
Subject: Demonstrate your skills by obtaining the new QRadar SIEM Foundation Badge

Be skilled ... and show for it

If you are new to QRadar, and you want to demonstrate your foundational skill level, you can now do so by taking the new IBM QRadar SIEM Foundation Badge test on the IBM Security Learning Academy.

This is an IBM-issued and IBM-recognized badge that attests that recipients have demonstrated their knowledge of various QRadar deployments architecture and key concepts such as user management, domains and tenants, assets, network hierarchy, flows, events, rules, offenses, reference data, data obfuscation, and reporting.

The cool thing with this badge is, it is purely based on free educational material available on the Security Learning Academy. The Badge explicitly lists and tracks all the required QRadar courses for you.

So head out and start building your skill set, take the Badge Quiz, and proof your knowledge by showing off your QRadar Foundations Skill Badge.

------------------------------
Axel Buecker
IBM Learning Services Specialist
IT Specialist for Security Architectures
------------------------------

"We finally decided to keep a few of these in the test (~5 out of a pool of over 100) where the answer is clearly defined by either the user interface or a definition in the manuals."

Tried the test twice, and both times there were well over 10  blank space type questions. The last attempt today had 19.

One of my colleagues got 20... out of 63! I don't understand how anyone can think that this is a good option for any sort of tests, seeing as not everyone has English as their first language. 

Totally in agreement with Bruno with regards to multiple choice being a superior option. 

Did get close tho, 50.33/63.00, but not close enough.  

------------------------------
Edmund Johansen
------------------------------

Original Message:
Sent: Tue September 03, 2019 11:25 AM
From: Axel Buecker
Subject: Demonstrate your skills by obtaining the new QRadar SIEM Foundation Badge

Thanks so much for your feedback Bruno & Anthony!

We discussed this type of question (where you have to manually enter/type the answer) in our team quite a bit. We finally decided to keep a few of these in the test (~5 out of a pool of over 100) where the answer is clearly defined by either the user interface or a definition in the manuals.

I'll keep an eye on the forum and the course feedbacks ... we do adjust our content quite a bit based on feedback. So ... keep it coming :-)

Cheers …
Axel

------------------------------
Axel Buecker
IBM Learning Services Specialist
IT Specialist for Security Architectures

Original Message:
Sent: Tue September 03, 2019 05:51 AM
From: Bruno Oliveira
Subject: Demonstrate your skills by obtaining the new QRadar SIEM Foundation Badge

Hi Anthony,

Thank you! Therefore, I think that a multiple choice question would fit better than this kind of question, since we show that we know (edit, modify, change are all synonyms) but are not sure exactly which word is expected in those blank spaces.

Regards,
Bruno

------------------------------
Bruno Oliveira

Original Message:
Sent: Tue September 03, 2019 12:59 AM
From: Anthony Gayadeen
Subject: Demonstrate your skills by obtaining the new QRadar SIEM Foundation Badge

Hi Bruno,
in this case "Edit" would be the good answer since it's the option you'll find in 'Admin > Users'. It's the term used in the menu. The other words mentionned may mean the same thing, but it's not the exact word you'll find.

Btw, I hope this is not a real question of the exam or you should remove it from the forum ;)
Thanks!

------------------------------
Anthony Gayadeen, Videotron Ltd
Montreal QC

Original Message:
Sent: Mon September 02, 2019 06:11 AM
From: Bruno Oliveira
Subject: Demonstrate your skills by obtaining the new QRadar SIEM Foundation Badge

Thank you! The exam is not as easy as expected. In spite of that, I managed to pass it ( with a not so good grade). There are some questions where we should fill the blanks. It is not clear which is a correct answer. For example:

An administrative user role cannot ____________ their own account when they are logged in to the Qradar Console.

Possible correct answers could be: edit, modify, change, delete, re-create...

Don't know which is the most correct answer in this case.
In another question we should answer "deduplication", but in the Qradar documentation there is also the word "de-duplication". Are both accepted as valid answers?

------------------------------
Bruno Oliveira

Original Message:
Sent: Tue August 13, 2019 03:53 PM
From: Axel Buecker
Subject: Demonstrate your skills by obtaining the new QRadar SIEM Foundation Badge

Be skilled ... and show for it

If you are new to QRadar, and you want to demonstrate your foundational skill level, you can now do so by taking the new IBM QRadar SIEM Foundation Badge test on the IBM Security Learning Academy.

This is an IBM-issued and IBM-recognized badge that attests that recipients have demonstrated their knowledge of various QRadar deployments architecture and key concepts such as user management, domains and tenants, assets, network hierarchy, flows, events, rules, offenses, reference data, data obfuscation, and reporting.

The cool thing with this badge is, it is purely based on free educational material available on the Security Learning Academy. The Badge explicitly lists and tracks all the required QRadar courses for you.

So head out and start building your skill set, take the Badge Quiz, and proof your knowledge by showing off your QRadar Foundations Skill Badge.

------------------------------
Axel Buecker
IBM Learning Services Specialist
IT Specialist for Security Architectures
------------------------------