{"EXAM_SERIES_CODE":"C1000-175","EXAM_STATUS_ID":"1","EXAM_REVIEW_APPROVAL_STATUS_OPS":null,"EXAM_REVIEW_APPROVAL_STATUS_OTHER":null,"EXAM_REVIEW_APPROVAL_STATUS_PUBLISH":null,"EXAM_TITLE":"Foundations of IBM Security QRadar SIEM V7.5","WITHDRAWAL_DATE":null,"CREATED_BY_EMAIL":"amccarl@us.ibm.com","CREATED_BY_DATE":"2023-09-07 00:00:00.000000","OWNER_NAME":"Andrew C Mccarl","OWNER_EMAIL":"amccarl@us.ibm.com","LAST_MODIFIED_BY_EMAIL":"jessfern@us.ibm.com","LAST_MODIFIED_BY_DATE":"2025-10-14 00:00:00.000000","EXAM_BUSINESS":"IBM Security","EXAM_BRAND":"Threat Management","EXAM_REPLACED_FLAG":false,"REPLACE_BY_EXAM_SERIES_CODE":null,"PREREQUISITE_EXAM_SERIES_CODE":null,"OVERVIEW_JOB_ROLE":"<p>An IBM Certified Associate – Security QRadar SIEM V7.5 is an individual with entry level knowledge and experience with QRadar SIEM V7.5. &nbsp;This individual understands foundational concepts of QRadar SIEM V7.5 through hands-on experience and formal and informal education. The associate has knowledge of the basic to intermediate tasks required in day-to-day use of QRadar SIEM V7.5.</p><p>&nbsp;</p><p>Note: The function of specific apps, apart from those bundled with the product, is out of scope, but the concept of extending the capability of using apps is in scope. &nbsp;This exam does not include the SaaS offering QRadar on Cloud (QRoC).</p><p>&nbsp;</p><p><strong>Key Areas of Competency</strong></p><ul><li>SIEM concepts</li><li>QRadar architecture</li><li>User interface</li><li>Extensions</li><li>Flows</li><li>Rules and Building Blocks</li><li>Working with Offenses</li><li>Search, filtering, and AQL</li><li>Assets</li><li>Reporting and Dashboards</li><li>Events</li><li>Basic tuning</li><li>QRadar system errors</li><li>User and Role management</li></ul><p>&nbsp;</p><p><strong>Prerequisite Knowledge</strong> (not measured on the test)</p><ul><li>Regular Expressions</li><li>Basic Linux knowledge</li><li>Basic Windows knowledge</li><li>Basic SQL database knowledge</li><li>Network infrastructures and devices</li><li>Basic system architecture</li><li>Security technologies such as firewalls, encryption using keys, SSL, HTTPS, EDR, IPS, WAF, etc.</li></ul>","OVERVIEW_JOB_SKILL":null,"EXAM_TIME_LIMIT":90,"EXAM_PASSING_SCORE":66,"EXAM_NUMBER_OF_QUESTIONS":62,"EXAM_NUMBER_OF_QUESTIONS_TO_PASS":41,"EXAM_PRICE_DEVELOPED":null,"EXAM_PRICE_EMERGING":null,"EXAM_PRICE_JAPAN":null,"AVAILABLE_FOR_PROCTOR_FLAG":true,"WITHDRAWAL_WARNING_DAYS":30,"BADGE_REPLACED_FLAG":false,"REPLACE_BY_BADGE_ID":null,"EDUCATION_OVERVIEW":"<p>To prepare for the test, first reference the courses listed below.&nbsp;</p><p>&nbsp;</p><p><strong>Note:</strong></p><ul><li>Hands-on product knowledge is required to pass the test.</li><li>These learning sources are recommended, but not required before taking this test.</li><li>Every effort has been made to make the recommended learning sources as complete and as accurate as possible, but no warranty of fitness is implied. The learning sources provided are on an 'as is' basis. IBM shall have neither liability nor responsibility to any person or entity with respect to any loss or damages arising from course or publication content.</li></ul>","JTA_OBJECTIVE_UPLOAD_PATH":null,"JTA_SURVEY_FLAG":true,"JTA_JOB_ROLE_DESCRIPTION":"<p>An IBM Certified Associate – Security QRadar SIEM V7.5 is an individual with entry level knowledge and experience with QRadar SIEM V7.5. &nbsp;This individual understands foundational concepts of QRadar SIEM V7.5 through hands-on experience and formal and informal education. The associate has knowledge of the basic to intermediate tasks required in day-to-day use of QRadar SIEM V7.5.</p><p>&nbsp;</p><p>Note: The function of specific apps, apart from those bundled with the product, is out of scope, but the concept of extending the capability of using apps is in scope. &nbsp;This exam does not include the SaaS offering QRadar on Cloud (QRoC).</p><p>&nbsp;</p><p><strong>Key Areas of Competency</strong></p><ul><li>SIEM Concepts</li><li>QRadar Architecture</li><li>User Interface</li><li>Extensions</li><li>Flows</li><li>Rules and Building Blocks</li><li>Working with Offenses</li><li>Search, filtering, and AQL</li><li>Assets</li><li>Reporting and Dashboards</li><li>Events</li><li>Basic tuning</li><li>QRadar system errors</li><li>User and Role Management</li></ul><p>&nbsp;</p><p><strong>Prerequisite Knowledge</strong> (not measured on the test)</p><ul><li>Regular expressions&nbsp;</li><li>Basic Linux knowledge</li><li>Basic Windows knowledge</li><li>Basic SQL database knowledge</li><li>Network infrastructures and devices</li><li>Basic system architecture</li><li>Security technologies such as firewalls, encryption using keys, SSL, HTTPS, EDR, IPS, WAF, etc.</li></ul><p>&nbsp;</p>","BLUEPRINT_UPLOAD_PATH":null,"SURVEY_FROM_JTA_COUNT":26,"PLANNED_ASSESSMENT_EXAM_FLAG":true,"PLANNED_SAMPLE_QUESTIONS_FLAG":true,"NUMBER_OF_LIVE_FORMS":2,"NUMBER_OF_ITEMS_PER_FORM":62,"MINIMALLY_COMPETENT_CANDIDATE":"<p>An IBM Certified Associate – Security QRadar SIEM V7.5 is an individual with entry level knowledge and experience with QRadar SIEM V7.5. &nbsp;This individual understands foundational concepts of QRadar SIEM V7.5 through hands-on experience and formal and informal education. The associate has knowledge of the basic to intermediate tasks required in day-to-day use of QRadar SIEM V7.5.</p><p>&nbsp;</p><p>Note: The function of specific apps, apart from those bundled with the product, is out of scope, but the concept of extending the capability of using apps is in scope. &nbsp;This exam does not include the SaaS offering QRadar on Cloud (QRoC).</p><p>&nbsp;</p><p><strong>Key Areas of Competency</strong></p><ul><li>SIEM Concepts</li><li>QRadar Architecture</li><li>User Interface</li><li>Extensions</li><li>Flows</li><li>Rules and Building Blocks</li><li>Working with Offenses</li><li>Search, filtering, and AQL</li><li>Assets</li><li>Reporting and Dashboards</li><li>Events</li><li>Basic tuning</li><li>QRadar system errors</li><li>User and Role Management</li></ul><p>&nbsp;</p><p><strong>Prerequisite Knowledge</strong> (not measured on the test)</p><ul><li>Regular expressions&nbsp;</li><li>Basic Linux knowledge</li><li>Basic Windows knowledge</li><li>Basic SQL database knowledge</li><li>Network infrastructures and devices</li><li>Basic system architecture</li><li>Security technologies such as firewalls, encryption using keys, SSL, HTTPS, EDR, IPS, WAF, etc.</li></ul><p>&nbsp;</p>","ITEMTYPE_MULTIPLE_CHOICE":true,"ITEMTYPE_DOMC":false,"ITEMTYPE_BUILD_LIST":true,"ITEMTYPE_HOT_AREA":false,"ITEM_WRITING_TOOL_OTHER":null,"ITEM_WRITING_BEST_PRACTICE":true,"ITEM_WRITING_BEST_PRACTICE_OTHER":null,"ITEM_WRITING_TYPES":2,"ITEM_WRITING_GRAMMAR_CHECK_FLAG":true,"ITEM_WRITING_TECHNICAL_CHECK_FLAG":true,"PSYCHO_REVIEWED_ALL_FLAG":false,"PSYCHO_EVALUATE_TEN_PERCENT_FLAG":false,"PSYCHOMETRIC_REVIEWER_NAME":null,"PSYCHOMETRIC_REVIEWER_EMAIL":null,"STANDARDS_TWO_STEP_METHOD_FLAG":true,"STANDARDS_OTHER":null,"STANDARDS_OTHER_WHO":null,"STANDARDS_OTHER_DATE":null,"STANDARDS_OTHER_COMMENTS":null,"STANDARDS_SUPPORTING_FILES_UPLOAD_PATH":null,"CUTSCORE_RATING_FILE_UPLOAD_PATH":null,"FORMS_ASSESSMENT":true,"FORMS_SAMPLE_QUESTIONS":true,"FORMS_ITEMS_PER_FORM":62,"FORMS_ANCHOR_ITEMS_PER_FORM":10,"SAMPLE_EXAM_COS_KEY":null,"STUDY_GUIDE_COS_KEY":null,"TINSERTTS":"2023-09-07 16:01:18.079462","TLASTUPDTS":"2025-10-14 16:53:48.113602","FINANCE_BUSINESS_UNIT":"IBM Security","FINANCE_BRAND":"Not Applicable","EXAM_TYPE_ID":0,"DIVERSE_COUNTRY_BACKGROUND_FLAG":true,"EXAM_TYPE_DEVELOPING":"New exam based on existing technology","STANDARDS_JOB_ROLE_DESC":"<p>An IBM Certified Associate – Security QRadar SIEM V7.5 is an individual with entry level knowledge and experience with QRadar SIEM V7.5. &nbsp;This individual understands foundational concepts of QRadar SIEM V7.5 through hands-on experience and formal and informal education. The associate has knowledge of the basic to intermediate tasks required in day-to-day use of QRadar SIEM V7.5.</p><p>&nbsp;</p><p>Note: The function of specific apps, apart from those bundled with the product, is out of scope, but the concept of extending the capability of using apps is in scope. &nbsp;This exam does not include the SaaS offering QRadar on Cloud (QRoC).</p><p>&nbsp;</p><p><strong>Key Areas of Competency</strong></p><ul><li>SIEM Concepts</li><li>QRadar Architecture</li><li>User Interface</li><li>Extensions</li><li>Flows</li><li>Rules and Building Blocks</li><li>Working with Offenses</li><li>Search, filtering, and AQL</li><li>Assets</li><li>Reporting and Dashboards</li><li>Events</li><li>Basic tuning</li><li>QRadar system errors</li><li>User and Role Management</li></ul><p>&nbsp;</p><p><strong>Prerequisite Knowledge</strong> (not measured on the test)</p><ul><li>Regular expressions&nbsp;</li><li>Basic Linux knowledge</li><li>Basic Windows knowledge</li><li>Basic SQL database knowledge</li><li>Network infrastructures and devices</li><li>Basic system architecture</li><li>Security technologies such as firewalls, encryption using keys, SSL, HTTPS, EDR, IPS, WAF, etc.</li></ul><p>&nbsp;</p>","ITEMTYPE_OTHER":false,"TARGET_PUBLICATION_DATE":"2023-12-22","PEARSONVUE_START_DATE":null,"ACTUAL_START_DATE":"2023-12-15 00:00:00.000000","FORMS_PSYCHOMETRICIAN_NAME":"Isaac Pfleger","FORMS_PSYCHOMETRICIAN_EMAIL":"isaac@cms.itemexperts.com","PEARSONVUE_SELECTION":"Publish according to business rules","ASSESSMENT_FLAG":true,"PARENT_FORMS":"Form A,Form B,Form C","GOVERNANCE_COMPLETED_FLAG":true,"WITHDRAWAL_REASON":null,"WITHDRAWAL_REASON_COMMENT":null,"PV_PUBLISH_DATE":"2023-12-15 17:18:07.490987","READY_FOR_LIVE_DATE":"2023-12-15 17:19:39.197949","UUID":"2e6e64cd-278b-4d46-9a7f-480565e965af","GO_LIVE_DATE":"2023-12-20 18:38:03.707345","MKTGCATEGORY":"MBI01","EXAM_STATUS":"Live","MKTGCATEGORY_NAME":"Security","OBJECTIVES":[{"EXAM_SERIES_CODE":"C1000-175","EXAM_OBJECTIVE_ID":0,"EXAM_OBJECTIVE_TITLE":"SIEM Concepts","PERCENTAGE_OF_OBJECTIVE_QUESTIONS":"10","EXAM_OBJECTIVE_DESCRIPTION":"<ul><li>Log Management</li><li>Event Correlation and Analytics</li><li>Incident Monitoring and Security Alerts</li><li>Compliance Management and Reporting</li></ul>","EXAM_OBJECTIVE_ORDER":0,"TINSERTTS":"2025-10-14 16:53:47.940481","TLASTUPDTS":"2025-10-14 16:53:47.940481"},{"EXAM_SERIES_CODE":"C1000-175","EXAM_OBJECTIVE_ID":1,"EXAM_OBJECTIVE_TITLE":"QRadar Architecture","PERCENTAGE_OF_OBJECTIVE_QUESTIONS":"10","EXAM_OBJECTIVE_DESCRIPTION":"<ul><li>Understand the logical components of QRadar</li><li>Understand QRadar appliances</li><li>Understand how QRadar can be deployed in different environments</li></ul>","EXAM_OBJECTIVE_ORDER":1,"TINSERTTS":"2025-10-14 16:53:47.943535","TLASTUPDTS":"2025-10-14 16:53:47.943535"},{"EXAM_SERIES_CODE":"C1000-175","EXAM_OBJECTIVE_ID":2,"EXAM_OBJECTIVE_TITLE":"User Interface","PERCENTAGE_OF_OBJECTIVE_QUESTIONS":"5","EXAM_OBJECTIVE_DESCRIPTION":"<ul><li>Describe main portions of the QRadar SIEM GUI</li></ul>","EXAM_OBJECTIVE_ORDER":2,"TINSERTTS":"2025-10-14 16:53:47.946606","TLASTUPDTS":"2025-10-14 16:53:47.946606"},{"EXAM_SERIES_CODE":"C1000-175","EXAM_OBJECTIVE_ID":3,"EXAM_OBJECTIVE_TITLE":"Extensions","PERCENTAGE_OF_OBJECTIVE_QUESTIONS":"5","EXAM_OBJECTIVE_DESCRIPTION":"<ul><li>Illustrate the use of the IBM Security App Exchange</li><li>Understand the QRadar Assistant App</li><li>Describe the installed apps</li></ul>","EXAM_OBJECTIVE_ORDER":3,"TINSERTTS":"2025-10-14 16:53:47.949648","TLASTUPDTS":"2025-10-14 16:53:47.949648"},{"EXAM_SERIES_CODE":"C1000-175","EXAM_OBJECTIVE_ID":4,"EXAM_OBJECTIVE_TITLE":"Flows","PERCENTAGE_OF_OBJECTIVE_QUESTIONS":"6","EXAM_OBJECTIVE_DESCRIPTION":"<ul><li>Describe flows versus events</li><li>Manage flow sources</li><li>Explain the basic use case for QNI versus QIF</li><li>Understand that there are three inspection levels in QNI</li></ul>","EXAM_OBJECTIVE_ORDER":4,"TINSERTTS":"2025-10-14 16:53:47.952574","TLASTUPDTS":"2025-10-14 16:53:47.952574"},{"EXAM_SERIES_CODE":"C1000-175","EXAM_OBJECTIVE_ID":5,"EXAM_OBJECTIVE_TITLE":"Rules and Building Blocks","PERCENTAGE_OF_OBJECTIVE_QUESTIONS":"10","EXAM_OBJECTIVE_DESCRIPTION":"<ul><li>Create and configure rules</li><li>Understand the use of rule types</li><li>Understand rules tests</li><li>Understand rule responses</li><li>Create and manage building blocks</li><li>Describe Local versus Global correlation<br>&nbsp;</li></ul>","EXAM_OBJECTIVE_ORDER":5,"TINSERTTS":"2025-10-14 16:53:47.955431","TLASTUPDTS":"2025-10-14 16:53:47.955431"},{"EXAM_SERIES_CODE":"C1000-175","EXAM_OBJECTIVE_ID":6,"EXAM_OBJECTIVE_TITLE":"Working with Offenses","PERCENTAGE_OF_OBJECTIVE_QUESTIONS":"8","EXAM_OBJECTIVE_DESCRIPTION":"<ul><li>Describe the basic offense lifecycle</li><li>Manage offenses</li></ul>","EXAM_OBJECTIVE_ORDER":6,"TINSERTTS":"2025-10-14 16:53:47.958417","TLASTUPDTS":"2025-10-14 16:53:47.958417"},{"EXAM_SERIES_CODE":"C1000-175","EXAM_OBJECTIVE_ID":7,"EXAM_OBJECTIVE_TITLE":"Search, Filtering, and AQL","PERCENTAGE_OF_OBJECTIVE_QUESTIONS":"8","EXAM_OBJECTIVE_DESCRIPTION":"<ul><li>Utilize different search types</li><li>Conduct search management</li><li>Use Filters</li></ul>","EXAM_OBJECTIVE_ORDER":7,"TINSERTTS":"2025-10-14 16:53:47.961310","TLASTUPDTS":"2025-10-14 16:53:47.961310"},{"EXAM_SERIES_CODE":"C1000-175","EXAM_OBJECTIVE_ID":8,"EXAM_OBJECTIVE_TITLE":"Assets","PERCENTAGE_OF_OBJECTIVE_QUESTIONS":"5","EXAM_OBJECTIVE_DESCRIPTION":"<ul><li>Explain how the asset database gets populated</li><li>Describe the value of the vulnerability information in the asset database</li><li>Demonstrate use of the asset database</li></ul>","EXAM_OBJECTIVE_ORDER":8,"TINSERTTS":"2025-10-14 16:53:47.964342","TLASTUPDTS":"2025-10-14 16:53:47.964342"},{"EXAM_SERIES_CODE":"C1000-175","EXAM_OBJECTIVE_ID":9,"EXAM_OBJECTIVE_TITLE":"Reporting and Dashboards","PERCENTAGE_OF_OBJECTIVE_QUESTIONS":"6","EXAM_OBJECTIVE_DESCRIPTION":"<ul><li>Generate, modify and interpret reports using QRadar templates</li><li>Interpret QRadar dashboards</li><li>Manage reports</li><li>Use the Report Wizard</li></ul>","EXAM_OBJECTIVE_ORDER":9,"TINSERTTS":"2025-10-14 16:53:47.967329","TLASTUPDTS":"2025-10-14 16:53:47.967329"},{"EXAM_SERIES_CODE":"C1000-175","EXAM_OBJECTIVE_ID":10,"EXAM_OBJECTIVE_TITLE":"Events","PERCENTAGE_OF_OBJECTIVE_QUESTIONS":"10","EXAM_OBJECTIVE_DESCRIPTION":"<ul><li>Describe the processes of data ingestion</li><li>Log source management</li><li>Event parsing</li><li>Custom properties</li><li>Describe the basic uses of the DSM editor</li></ul>","EXAM_OBJECTIVE_ORDER":10,"TINSERTTS":"2025-10-14 16:53:47.970426","TLASTUPDTS":"2025-10-14 16:53:47.970426"},{"EXAM_SERIES_CODE":"C1000-175","EXAM_OBJECTIVE_ID":11,"EXAM_OBJECTIVE_TITLE":"Configuration and Tuning","PERCENTAGE_OF_OBJECTIVE_QUESTIONS":"6","EXAM_OBJECTIVE_DESCRIPTION":"<ul><li>Understand network hierarchy</li><li>Explain the licensing model</li></ul>","EXAM_OBJECTIVE_ORDER":11,"TINSERTTS":"2025-10-14 16:53:47.973354","TLASTUPDTS":"2025-10-14 16:53:47.973354"},{"EXAM_SERIES_CODE":"C1000-175","EXAM_OBJECTIVE_ID":12,"EXAM_OBJECTIVE_TITLE":"QRadar System Errors","PERCENTAGE_OF_OBJECTIVE_QUESTIONS":"6","EXAM_OBJECTIVE_DESCRIPTION":"<ul><li>Monitor QRadar Notifications and error messages</li><li>Investigate common errors</li></ul>","EXAM_OBJECTIVE_ORDER":12,"TINSERTTS":"2025-10-14 16:53:47.976352","TLASTUPDTS":"2025-10-14 16:53:47.976352"},{"EXAM_SERIES_CODE":"C1000-175","EXAM_OBJECTIVE_ID":13,"EXAM_OBJECTIVE_TITLE":"User and Role Management","PERCENTAGE_OF_OBJECTIVE_QUESTIONS":"5","EXAM_OBJECTIVE_DESCRIPTION":"<ul><li>Understand user roles</li><li>Understand user authentication and authorization</li><li>Understand security profiles</li></ul>","EXAM_OBJECTIVE_ORDER":13,"TINSERTTS":"2025-10-14 16:53:47.979233","TLASTUPDTS":"2025-10-14 16:53:47.979233"}],"RESOURCES":[{"TYPE":"Online course","RESOURCES":[{"RESOURCE_TITLE":"IBM QRadar SIEM Foundation","RESOURCE_DESCRIPTION":"<p>This is an IBM-issued and IBM-recognized badge that attests that recipients have demonstrated their knowledge of various QRadar deployments architecture and key concepts such as user management, domains and tenants, assets, network hierarchy, flows, events, rules, offenses, reference data, data obfuscation, and reporting.&nbsp;</p>","RESOURCE_URL":"https://www.ibm.com/training/learning-path/ibmqradarsiemfoundationbadge","RESOURCE_TYPE_NAME":"Online course"}]}],"RELATED_CERTS":[{"PARTNERWORLD_CODE":"C9006200","CREDENTIAL_TITLE":"IBM Certified Associate -  Security QRadar SIEM V7.5"}],"PREREQS":[],"ASSOC_COURSES":[{"COURSE_CODE":"BQ105G","CSEMSTRNAME":"IBM QRadar SIEM Foundations"},{"COURSE_CODE":"BQ105XG","CSEMSTRNAME":"IBM QRadar SIEM Foundations"}],"ASSOC_NON":[],"ASSOC_PATHS":[],"ASSESSMENT":"A1000-175","LANGUAGES":"English","PRICE":200,"STUDY_GUIDE_URL":"https://s3-api.us-geo.objectstorage.softlayer.net/credman-prod/exam/C1000-175_STU_stuC1000175.pdf?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=88673a689335411dbbef07d4969c34c2%2F20260914%2Fus-geo%2Fs3%2Faws4_request&X-Amz-Date=20260914T060916Z&X-Amz-Expires=86400&X-Amz-SignedHeaders=host&response-content-disposition=inline%3B%20%3B%20filename%3D%22C1000-175_STU_stuC1000175.pdf%22&X-Amz-Signature=56dff191929c3501bde01994c17dd71824bf1b5ca10b63ae777be6b43bd0cf49","SAMPLE_EXAM_URL":"https://s3-api.us-geo.objectstorage.softlayer.net/credman-prod/exam/C1000-175_SAM_samC1000175.pdf?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=88673a689335411dbbef07d4969c34c2%2F20260914%2Fus-geo%2Fs3%2Faws4_request&X-Amz-Date=20260914T060916Z&X-Amz-Expires=86400&X-Amz-SignedHeaders=host&response-content-disposition=inline%3B%20%3B%20filename%3D%22C1000-175_SAM_samC1000175.pdf%22&X-Amz-Signature=3e792242004ea4ec6e145c0d6d8e2b41eee4dc3d4c7a9062c55d836431f843fa"}