Exam C1000-156 Topic 7 Question 63 Discussion

Actual exam question for IBM's C1000-156 exam
Question #: 63
Topic #: 7
Before configuring a WinCollect log source, which two ports does a QRadar administrator ensure are open?

Suggested Answer: A Vote an answer

Before configuring a WinCollect log source in QRadar, the administrator must ensure that specific network ports are open to facilitate communication. The required ports are:
Port 514: This is the default port for syslog, a standard protocol used to send system log or event messages to a specific server. WinCollect uses this port to send logs from Windows machines to the QRadar server.
Port 8413: This port is used for communication between the WinCollect agent and the QRadar Console. It is necessary for managing the WinCollect agent and ensuring proper data transmission.
Ensuring these ports are open is crucial for the seamless operation and integration of WinCollect with QRadar, allowing the secure and efficient collection of log data from Windows environments.
Reference
IBM Security QRadar SIEM and IBM Security QRadar EDR integration.pdf

by Frank at Sep 27, 2026, 07:46 PM

Limited Time Offer

15%

Off

Get Premium C1000-156 Questions as Interactive Self Test Engine or PDF

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
Nick name: Submit Cancel
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
0
0
0
10