IBM Security QRadar SIEM V7.4.3 Administration — Question 47

A QRadar deployment professional was asked to plan a system migration from an on-premises, appliance-based environment to an AWS environment. As part of this transition, the Ariel data must be moved to the new logical appliances and must be searchable by using the existing mechanisms (for example, to filter by log source).
Which approach can the deployment professional use to migrate the configuration after the VM is built (and before the Ariel data is restored)?

Answer options

• A. Use the Content Management Tool (CMT) to transfer the security configuration
• B. Use the QRadar configuration backup and restore process to transfer all configurations
• C. Export the security content with CMT and import using the REST-API
• D. Use rsync to transfer the contents of the /store partition to the new system

Correct answer: C

Explanation

The correct answer is C because using the REST-API to import the exported security content ensures the configurations are compatible with the new AWS environment. Option A focuses only on security configuration, while B transfers all configurations, which might not be necessary at this point. Option D involves transferring data but does not address the migration of configurations effectively.