What key point should be understood about how flow information in IBM Security QRadar SIEM V7.2.8 is used?
A. Flow information generates the response that is configured in the custom rule.
B. Flow information is sent to QRadar QFIow Collector which normalizes raw log source events.
C. Flow information is actively gathered from the QRadar Event Collector and provides views, reports and alerts to the administrator.
D. Flow information is used to detect threats and other suspicious activity that might be missed if only event information were tracked.
|
Download Printable PDF. VALID exam to help you PASS. |
 |