When it comes to licensing, what is the difference between Events and Flows and how they are licensed?
A. Flows are licensed based on overall count over a minute, where Events are licensed based on overall count per second.
B. Flows are licensed based on overall count per second, where Events are licensed based on overall count over a minute.
C. Flows and Events are both licensed by overall count per minute under an Upgraded License and per second on a Basic License.
D. Flows and Events are both licensed by overall count per second under an Upgraded License and per second on a Basic License.
Correct Answer: A
Explanation/Reference:
Explanation:
A significant difference between event and flow data is that an event, which typically is a log of a specific action such as a user login, or a VPN connection, occurs at a specific time and event is logged at that time. A flow is a record of network activity that can last for seconds, minutes, hours, or days, depending on the activity within the session. For example, a web reqi might download multiple files such as images, ads, video, and last for 5 to 10 seconds, or a user who watches a Netflix movie might be in a network session that lasts up tA. few hours, flow is a record of network activity between two hosts.
Reference: https://www.ibm.com/support/knowledaecenter/en/SS42VS 7.2.8/com.ibm.qradar.doc/c_qradar_deploy_event_and_flow pipeline.html
|
Download Printable PDF. VALID exam to help you PASS.
|
 |
