Home » IBM » C2150-624 » How can an IBM Security QRadar SIEM V7.2.8 Administrator capture specific data tA. reference set when QRadar receives the data from events or flow data?
How can an IBM Security QRadar SIEM V7.2.8 Administrator capture specific data tA. reference set when QRadar receives the data from events or flow data?
A. Create or modify a report so the required data is exported tA. Reference Set.
B. On the Admin tab. create or modify the reference set to capture the required data.
C. On the Admin tab define a Custom Action to add the required data tA. Reference Set.
D. Create or modify a rule so the Rule Response will add the required data tA. Reference Set.
Correct Answer: B
Explanation/Reference:
Explanation:
You can click on the admin tab and select system configuration. The Reference set management will be seen. Click New and configure the parameters.
Reference: ftp://public.dhe.ibm.com/software/security/products/qradar/documents/71MR1/SIEM/CoreDocs/QRadar_71 MR1_AdminGuide.pdf
Download Printable PDF. VALID exam to help you PASS.
|
|