IBM Security QRadar SIEM V7.4.3 Administration — Question 5

A QRadar deployment professional is asked to migrate the configuration of a system from Log Manager to QRadar SIEM.
How should the custom rules, saved searches, and reports be migrated?

Answer options

• A. Use the QRadar config backup and restore process to transfer all configurations.
• B. Use the content management tool (CMT) to transfer the security configuration.
• C. The only option is to use the GUI to manually recreate any required content.
• D. Use rsync to transfer the contents of the /store partition to the new system.

Correct answer: D

Explanation

The correct answer is D because using rsync is a direct method to transfer files between systems, specifically for configurations stored in the /store partition. Options A and B do not apply to this scenario as they refer to backup and content management tools that are not suitable for this type of migration. Option C is incorrect as it suggests manual recreation, which is not necessary when rsync can be used.