{"EXAM_SERIES_CODE":"C1000-163","EXAM_STATUS_ID":"1","EXAM_REVIEW_APPROVAL_STATUS_OPS":null,"EXAM_REVIEW_APPROVAL_STATUS_OTHER":null,"EXAM_REVIEW_APPROVAL_STATUS_PUBLISH":null,"EXAM_TITLE":"IBM Security QRadar SIEM V7.5 Deployment","WITHDRAWAL_DATE":null,"CREATED_BY_EMAIL":"briggsb@us.ibm.com","CREATED_BY_DATE":"2023-02-08 00:00:00.000000","OWNER_NAME":"Andrew C Mccarl","OWNER_EMAIL":"amccarl@us.ibm.com","LAST_MODIFIED_BY_EMAIL":"Saadia.Lomeli@ibm.com","LAST_MODIFIED_BY_DATE":"2026-01-07 00:00:00.000000","EXAM_BUSINESS":"IBM Security","EXAM_BRAND":"Threat Management","EXAM_REPLACED_FLAG":false,"REPLACE_BY_EXAM_SERIES_CODE":null,"PREREQUISITE_EXAM_SERIES_CODE":null,"OVERVIEW_JOB_ROLE":"<p>During exam development, the Subject Matter Experts (SMEs) define all of the tasks, knowledge and experience that an individual would need in order to successfully fulfill their role with the product or solution. These are represented by the objectives below and the questions on the exam are based upon these objectives.</p>","OVERVIEW_JOB_SKILL":null,"EXAM_TIME_LIMIT":90,"EXAM_PASSING_SCORE":66,"EXAM_NUMBER_OF_QUESTIONS":63,"EXAM_NUMBER_OF_QUESTIONS_TO_PASS":42,"EXAM_PRICE_DEVELOPED":null,"EXAM_PRICE_EMERGING":null,"EXAM_PRICE_JAPAN":null,"AVAILABLE_FOR_PROCTOR_FLAG":true,"WITHDRAWAL_WARNING_DAYS":30,"BADGE_REPLACED_FLAG":false,"REPLACE_BY_BADGE_ID":null,"EDUCATION_OVERVIEW":"<p>To prepare for the test, first reference the courses listed below.&nbsp;</p><p><strong>Note:</strong></p><ul><li>Extensive hands-on product knowledge is required to pass the test.</li><li>These learning sources are recommended, but not required before taking this test.</li><li>Every effort has been made to make the recommended learning sources as complete and as accurate as possible, but no warranty of fitness is implied. The learning sources provided are on an 'as is' basis. IBM shall have neither liability nor responsibility to any person or entity with respect to any loss or damages arising from course or publication content.</li></ul><p><strong>Online Self-study Course</strong></p><p><a href=\"http://learn.ibm.com/course/view.php?id=14050\">Click here</a><a href=\"https://www.securitylearningacademy.com/course/view.php?id=6882\"> </a>to access the online course for Test C1000-163, IBM Security QRadar SIEM V7.5 Deployment</p>","JTA_OBJECTIVE_UPLOAD_PATH":null,"JTA_SURVEY_FLAG":true,"JTA_JOB_ROLE_DESCRIPTION":"<p>This intermediate level certification is intended for professionals who wish to validate their comprehensive knowledge of the planning, installation, configuration, performance optimization, tuning, troubleshooting, and initial system administration tasks for IBM Security QRadar SIEM V7.5. This includes the apps installed with the product: Use Case Manager, QRadar Assistant, Log Source Management, and Pulse. This does not include the SaaS offering of QRadar on Cloud (QRoC). Questions for this exam were developed based upon IBM Security QRadar SIEM V7.5.0 Update Package 5.</p><p>Note: The usage of specific apps, apart from those bundled with the product, is out of scope, but the concept of extending the capability of using apps is in scope. A knowledge of the basic functions of these key IBM-supported apps should be understood: User Behavior Analytics, QRadar Deployment Intelligence, Reference Data Management, Threat Intelligence, and QRadar Advisor with Watson, Network Threat Analytics.</p>","BLUEPRINT_UPLOAD_PATH":null,"SURVEY_FROM_JTA_COUNT":27,"PLANNED_ASSESSMENT_EXAM_FLAG":true,"PLANNED_SAMPLE_QUESTIONS_FLAG":true,"NUMBER_OF_LIVE_FORMS":2,"NUMBER_OF_ITEMS_PER_FORM":63,"MINIMALLY_COMPETENT_CANDIDATE":"<p>This intermediate level certification is intended for professionals who wish to validate their comprehensive knowledge of the planning, installation, configuration, performance optimization, tuning, troubleshooting, and initial system administration tasks for IBM Security QRadar SIEM V7.5. This includes the apps installed with the product: Use Case Manager, QRadar Assistant, Log Source Management, and Pulse. This does not include the SaaS offering of QRadar on Cloud (QRoC). Questions for this exam were developed based upon IBM Security QRadar SIEM V7.5.0 Update Package 5.</p><p>Note: The usage of specific apps, apart from those bundled with the product, is out of scope, but the concept of extending the capability of using apps is in scope. A knowledge of the basic functions of these key IBM-supported apps should be understood: User Behavior Analytics, QRadar Deployment Intelligence, Reference Data Management, Threat Intelligence, and QRadar Advisor with Watson, Network Threat Analytics.</p>","ITEMTYPE_MULTIPLE_CHOICE":true,"ITEMTYPE_DOMC":false,"ITEMTYPE_BUILD_LIST":true,"ITEMTYPE_HOT_AREA":true,"ITEM_WRITING_TOOL_OTHER":null,"ITEM_WRITING_BEST_PRACTICE":true,"ITEM_WRITING_BEST_PRACTICE_OTHER":null,"ITEM_WRITING_TYPES":2,"ITEM_WRITING_GRAMMAR_CHECK_FLAG":true,"ITEM_WRITING_TECHNICAL_CHECK_FLAG":true,"PSYCHO_REVIEWED_ALL_FLAG":false,"PSYCHO_EVALUATE_TEN_PERCENT_FLAG":false,"PSYCHOMETRIC_REVIEWER_NAME":null,"PSYCHOMETRIC_REVIEWER_EMAIL":null,"STANDARDS_TWO_STEP_METHOD_FLAG":true,"STANDARDS_OTHER":null,"STANDARDS_OTHER_WHO":null,"STANDARDS_OTHER_DATE":null,"STANDARDS_OTHER_COMMENTS":null,"STANDARDS_SUPPORTING_FILES_UPLOAD_PATH":null,"CUTSCORE_RATING_FILE_UPLOAD_PATH":null,"FORMS_ASSESSMENT":true,"FORMS_SAMPLE_QUESTIONS":true,"FORMS_ITEMS_PER_FORM":63,"FORMS_ANCHOR_ITEMS_PER_FORM":10,"SAMPLE_EXAM_COS_KEY":null,"STUDY_GUIDE_COS_KEY":null,"TINSERTTS":"2023-02-08 20:59:45.779744","TLASTUPDTS":"2026-01-07 15:11:57.798211","FINANCE_BUSINESS_UNIT":"IBM Security","FINANCE_BRAND":"Not Applicable","EXAM_TYPE_ID":0,"DIVERSE_COUNTRY_BACKGROUND_FLAG":true,"EXAM_TYPE_DEVELOPING":"New version of an existing exam","STANDARDS_JOB_ROLE_DESC":"<p>This intermediate level certification is intended for professionals who wish to validate their comprehensive knowledge of the planning, installation, configuration, performance optimization, tuning, troubleshooting, and initial system administration tasks for IBM Security QRadar SIEM V7.5. This includes the apps installed with the product: Use Case Manager, QRadar Assistant, Log Source Management, and Pulse. This does not include the SaaS offering of QRadar on Cloud (QRoC). Questions for this exam were developed based upon IBM Security QRadar SIEM V7.5.0 Update Package 5.</p><p>Note: The usage of specific apps, apart from those bundled with the product, is out of scope, but the concept of extending the capability of using apps is in scope. A knowledge of the basic functions of these key IBM-supported apps should be understood: User Behavior Analytics, QRadar Deployment Intelligence, Reference Data Management, Threat Intelligence, and QRadar Advisor with Watson, Network Threat Analytics.</p>","ITEMTYPE_OTHER":false,"TARGET_PUBLICATION_DATE":null,"PEARSONVUE_START_DATE":null,"ACTUAL_START_DATE":"2023-05-31 00:00:00.000000","FORMS_PSYCHOMETRICIAN_NAME":"Isaac Pfleger, PhD","FORMS_PSYCHOMETRICIAN_EMAIL":"isaac@cms.itemexperts.com","PEARSONVUE_SELECTION":"Publish according to business rules","ASSESSMENT_FLAG":true,"PARENT_FORMS":"Form A,Form B,Form C","GOVERNANCE_COMPLETED_FLAG":true,"WITHDRAWAL_REASON":null,"WITHDRAWAL_REASON_COMMENT":null,"PV_PUBLISH_DATE":null,"READY_FOR_LIVE_DATE":"2023-05-31 16:48:37.444257","UUID":"d3f9eb5c-7b02-4c51-a1f2-88133a01e6b1","GO_LIVE_DATE":"2023-05-31 18:34:39.424419","MKTGCATEGORY":"MBI01","EXAM_STATUS":"Live","MKTGCATEGORY_NAME":"Security","OBJECTIVES":[{"EXAM_SERIES_CODE":"C1000-163","EXAM_OBJECTIVE_ID":0,"EXAM_OBJECTIVE_TITLE":"Deployment Objectives and Use Cases","PERCENTAGE_OF_OBJECTIVE_QUESTIONS":"10","EXAM_OBJECTIVE_DESCRIPTION":"<p>In this initial task, the QRadar deployment specialist, together with the client, analyze and document the business drivers and use cases that the deployment should address. Based on detailed use cases, the deployment specialist can develop the appropriate deployment architecture.</p><p>&nbsp;</p><ol><li>Review business needs</li><li>Determine useful QRadar Apps and Extension Packs</li><li>Define QRadar value reporting</li></ol>","EXAM_OBJECTIVE_ORDER":0,"TINSERTTS":"2026-01-07 15:11:57.573178","TLASTUPDTS":"2026-01-07 15:11:57.573178"},{"EXAM_SERIES_CODE":"C1000-163","EXAM_OBJECTIVE_ID":1,"EXAM_OBJECTIVE_TITLE":"Architecture and Sizing","PERCENTAGE_OF_OBJECTIVE_QUESTIONS":"16","EXAM_OBJECTIVE_DESCRIPTION":"<p>Defining and documenting the deployment architecture creates the underlying basis for successfully installing QRadar. The architecture defines a clear scope of the project based on the use cases. Here, the deployment specialist designs the solution and required components, such as the individual QRadar appliances (physical or virtual). The architecture also addresses topics such as high availability and disaster recovery, data retention, and licensing.</p><p>&nbsp;</p><ol><li>Determine scope and size requirements for deployment</li><li>Plan for placement of appliances</li><li>Determine requirements for data retention</li><li>Determine QRadar deployment components</li><li>Identify the need for HA and DR</li><li>Determine licensing requirements</li><li>Windows collection architecture</li></ol>","EXAM_OBJECTIVE_ORDER":1,"TINSERTTS":"2026-01-07 15:11:57.576841","TLASTUPDTS":"2026-01-07 15:11:57.576841"},{"EXAM_SERIES_CODE":"C1000-163","EXAM_OBJECTIVE_ID":2,"EXAM_OBJECTIVE_TITLE":"Installation and Configuration","PERCENTAGE_OF_OBJECTIVE_QUESTIONS":"16","EXAM_OBJECTIVE_DESCRIPTION":"<p>Based on the architecture documentation and scope, the deployment specialist installs and configures the QRadar components.&nbsp;</p><p>&nbsp;</p><ol><li>Install QRadar SIEM</li><li>Apply and update licensing</li><li>Apply QRadar system Certificates</li><li>Backup, recovery, and data retention</li><li>Conduct initial configuration</li><li>Configure authentication and access control</li></ol>","EXAM_OBJECTIVE_ORDER":2,"TINSERTTS":"2026-01-07 15:11:57.584865","TLASTUPDTS":"2026-01-07 15:11:57.584865"},{"EXAM_SERIES_CODE":"C1000-163","EXAM_OBJECTIVE_ID":3,"EXAM_OBJECTIVE_TITLE":"Event and Flow Integration","PERCENTAGE_OF_OBJECTIVE_QUESTIONS":"13","EXAM_OBJECTIVE_DESCRIPTION":"<p>After all QRadar components have been successfully deployed, it is time to add and configure the organization's log and flow sources. This includes automatically discovered and manually configured log sources as well as any custom properties or content extensions to satisfy the client's use cases.&nbsp;</p><p>&nbsp;</p><ol><li>Define log sources</li><li>Define and configure flow sources</li><li>Define custom properties</li><li>Install content extensions based on requirements</li><li>Identify event parsing requirements</li></ol>","EXAM_OBJECTIVE_ORDER":3,"TINSERTTS":"2026-01-07 15:11:57.588712","TLASTUPDTS":"2026-01-07 15:11:57.588712"},{"EXAM_SERIES_CODE":"C1000-163","EXAM_OBJECTIVE_ID":4,"EXAM_OBJECTIVE_TITLE":"Environment and X-Force Integration ","PERCENTAGE_OF_OBJECTIVE_QUESTIONS":"6","EXAM_OBJECTIVE_DESCRIPTION":"<p>The deployment specialist configures the included QRadar apps to function properly within the organization's environment as well as setting up the IBM X-Force Threat Intelligence Feeds. The deployment specialist also leads the client to properly populate and use the asset database (to the extent that has been identified in the use cases and scope of the project).&nbsp;</p><p>&nbsp;</p><ol><li>Configure Assistant App and use it to manage the apps</li><li>Establish X-Force intelligence data integration levels</li><li>Configure Use Case Manager</li><li>Populate and use the Asset database</li></ol>","EXAM_OBJECTIVE_ORDER":4,"TINSERTTS":"2026-01-07 15:11:57.592449","TLASTUPDTS":"2026-01-07 15:11:57.592449"},{"EXAM_SERIES_CODE":"C1000-163","EXAM_OBJECTIVE_ID":5,"EXAM_OBJECTIVE_TITLE":"System Performance and Troubleshooting ","PERCENTAGE_OF_OBJECTIVE_QUESTIONS":"13","EXAM_OBJECTIVE_DESCRIPTION":"<p>The deployment specialist performs initial system performance and troubleshooting, demonstrating the use of appropriate tools to perform these tasks. This does not entail ongoing support but is focused on the scope defined in the project objectives and architecture.&nbsp;</p><p>&nbsp;</p><ol><li>Look for R2R events</li><li>Monitor system performance</li><li>Check QRadar audit and self-monitoring events</li><li>Check and restart Apps as necessary</li><li>Identify event drops, events going to storage and unknown events</li></ol><p>&nbsp;</p>","EXAM_OBJECTIVE_ORDER":5,"TINSERTTS":"2026-01-07 15:11:57.596646","TLASTUPDTS":"2026-01-07 15:11:57.596646"},{"EXAM_SERIES_CODE":"C1000-163","EXAM_OBJECTIVE_ID":6,"EXAM_OBJECTIVE_TITLE":"Initial Offense Tuning","PERCENTAGE_OF_OBJECTIVE_QUESTIONS":"10","EXAM_OBJECTIVE_DESCRIPTION":"<p>As defined in the scope, project objectives and architecture, the deployment specialist performs initial tuning of offenses and guides the client on how to best approach this task going forward.&nbsp;</p><p>&nbsp;</p><ol><li>Tune noisy rules and CRE events</li><li>Identify expensive rules and properties</li><li>Utilize Server Discovery</li><li>Update building blocks</li><li>Manage and use reference data</li></ol>","EXAM_OBJECTIVE_ORDER":6,"TINSERTTS":"2026-01-07 15:11:57.600558","TLASTUPDTS":"2026-01-07 15:11:57.600558"},{"EXAM_SERIES_CODE":"C1000-163","EXAM_OBJECTIVE_ID":7,"EXAM_OBJECTIVE_TITLE":"Migration and Upgrades","PERCENTAGE_OF_OBJECTIVE_QUESTIONS":"10","EXAM_OBJECTIVE_DESCRIPTION":"<p>In case the project objectives and scope contain QRadar migration and/or upgrades, the deployment specialist has to investigate several migrations or upgrade related topics, such as data and content migration, app framework use cases, and other upgrade prerequisites.</p><p>&nbsp;</p><ol><li>Migrate Data</li><li>Review upgrade prerequisites</li><li>Determine content migration strategy</li><li>Review App Framework considerations (UBI)</li><li>Restoring a backup</li><li>Performing QRadar SIEM hardware migration</li></ol>","EXAM_OBJECTIVE_ORDER":7,"TINSERTTS":"2026-01-07 15:11:57.606128","TLASTUPDTS":"2026-01-07 15:11:57.606128"},{"EXAM_SERIES_CODE":"C1000-163","EXAM_OBJECTIVE_ID":8,"EXAM_OBJECTIVE_TITLE":"Multi-Tenancy Considerations","PERCENTAGE_OF_OBJECTIVE_QUESTIONS":"6","EXAM_OBJECTIVE_DESCRIPTION":"<p>The deployment specialist needs to be skilled to support an organization that needs to implement a QRadar multi-tenant deployment.&nbsp;</p><p>&nbsp;</p><ol><li>Define domains and tenants requirements</li><li>Configure items which involve Multi-tenancy</li></ol>","EXAM_OBJECTIVE_ORDER":8,"TINSERTTS":"2026-01-07 15:11:57.610123","TLASTUPDTS":"2026-01-07 15:11:57.610123"}],"RESOURCES":[{"TYPE":"Learning Path","RESOURCES":[{"RESOURCE_TITLE":"QRadar SIEM Administrator","RESOURCE_DESCRIPTION":"<p>This learning collection includes courses designed to help professionals learn to deploy, configure, and maintain the overall QRadar infrastructure based on a holistic deployment architecture.</p>","RESOURCE_URL":"https://www.ibm.com/training/collection/qradarsiemadministrator","RESOURCE_TYPE_NAME":"Learning Path"}]}],"RELATED_CERTS":[{"PARTNERWORLD_CODE":"C9005100","CREDENTIAL_TITLE":"IBM Certified Deployment Professional - Security QRadar SIEM V7.5"}],"PREREQS":[],"ASSOC_COURSES":[],"ASSOC_NON":[],"ASSOC_PATHS":[],"ASSESSMENT":"A1000-163","LANGUAGES":"English","PRICE":200,"STUDY_GUIDE_URL":"https://s3-api.us-geo.objectstorage.softlayer.net/credman-prod/exam/C1000-163_STU_stuc1000163.pdf?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=88673a689335411dbbef07d4969c34c2%2F20260927%2Fus-geo%2Fs3%2Faws4_request&X-Amz-Date=20260927T130838Z&X-Amz-Expires=86400&X-Amz-SignedHeaders=host&response-content-disposition=inline%3B%20%3B%20filename%3D%22C1000-163_STU_stuc1000163.pdf%22&X-Amz-Signature=a935b9e383eb3d7701cdf87acdf9bc58858c497f2cf2beb9e307b8aa8ac0e48c","SAMPLE_EXAM_URL":"https://s3-api.us-geo.objectstorage.softlayer.net/credman-prod/exam/C1000-163_SAM_samc1000163.pdf?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=88673a689335411dbbef07d4969c34c2%2F20260927%2Fus-geo%2Fs3%2Faws4_request&X-Amz-Date=20260927T130838Z&X-Amz-Expires=86400&X-Amz-SignedHeaders=host&response-content-disposition=inline%3B%20%3B%20filename%3D%22C1000-163_SAM_samc1000163.pdf%22&X-Amz-Signature=f4274283766cd1aa7c1bcbb2bb1029ae0e0068509c2afec83941e5f15455fdc9"}