A deployment professional wishes to implement a QRadar product which provides network topology, active attack paths and high-risk assets risk-score adjustment on assets based on policy compliance.
Which product would the deployment professional deploy to achieve this?

• A. QRadar Risk Manager
• B. QRadar Incident Forensics
• C. QRadar Vulnerability Scanner
• D. QRadar Topology Scanner

A customer needs to increase the storage space that is available to an Event Processor and be able to speed up historical searches.
Which solution should the deployment professional recommend?

• A. Expand the storage space on the Event Processor using LVM
• B. Connect additional External Storage to the Event Processor
• C. Add an Event Collector to the Event Processor
• D. Connect a Data Node to the Event Processor

A deployment professional is redesigning the existing deployment to add a event processor due to an increased event rate. The deployment professional observes the events per second (EPS) to be a collective 30,000 EPS from two event collectors (EC1 and EC2) and sometimes exceeds the EPS capacity. EC1 and EC2 are in same network segment.
Considering there are more licenses available than needed in the license pool, which processor should the deployment professional replace the event collector(s) with?

• A. Replace EC1 and EC2 with one QRadar Event Processor 1605
• B. Replace EC1 with one QRadar Event Processor 1605
• C. Replace EC1 with one QRadar Event Processor 1648
• D. Replace EC1 and EC2 with one QRadar Event Processor 1629

A deployment professional is asked to create QRadar deployment architecture for a company.
The company has three branch offices with WAN connection between them. The head office data center requires 14000 EPS and 200000 FPM. Each branch requires 4000 EPS and 200000 FPM.
Which deployment solution will meet the minimum requirements?

• A. QRadar 3105 (Console) in head office + QRadar 1805 Event and Flow Processor in each branch office
• B. QRadar 3129 (All-in-One) in head office
• C. QRadar 3129 (Console) in head office + QRadar 1805 Event and Flow Processor in each branch office
• D. QRadar 3105 (Console) and QRadar Event and Flow Processor 1829 in head office + QRadar 1805 Event and Flow Processor in each branch office

A deployment professional needs to install a new QRadar application downloaded from the IBM Security App Exchange.
Which option would the deployment professional select from the QRadar Console GUI under Admin: System Configuration to install the downloaded application?

• A. Customization Management.
• B. Application Management.
• C. Extensions Management.
• D. Content Management.