A customer wants to detect users that logged in from IP addresses in different locations simultaneously.
How can the customer achieve this using the QRadar console?
A. Create a rule to test for login failures from different country with 15 minutes
B. Create a rule to check for a local login within corporate network and simultaneous remote login
C. Create a rule to test for 2 or more logins from VPN or AD from different countries within 15 minutes
D. Create an offense to test for 2 or more logins from VPN or AD from different countries within 15 minutes
|
Download Printable PDF. VALID exam to help you PASS. |
 |