IBM Security QRadar SIEM V7.4.3 Administration — Question 42

A deployment professional is about to add a secondary appliance to a QRadar high availability deployment. It is confirmed that both the primary and the secondary appliances are on the same QRadar version. However, the hardware configuration of both appliances is different.
What must be confirmed before adding the secondary appliance to the high availability deployment?

Answer options

• A. The combined size of the /store and /transient partitions on the primary host must be larger than the /store partition on the secondary host.
• B. The secondary host must use a different management interface than the primary HA host.
• C. The primary host must contain more physical interfaces than the secondary.
• D. The combined size of the /store and /transient partitions on the secondary host must be equal to or larger than the /store partition on the primary host.

Correct answer: D

Explanation

The correct answer is D because for high availability to function properly, the secondary appliance must have sufficient storage capacity to accommodate the data from the primary appliance. Options A, B, and C are incorrect because they do not address the essential requirement of partition size compatibility between the primary and secondary hosts.