Câu 12: C1000-140: IBM Security QRadar SIEM V7.4.3 Deployment

What approach does QRadar take when it imposes EPS license (not hardware) limits on events that temporarily spike above that limit?

1. A. Excessive events in a spike cause a System Notification that advises the customer to increase their EPS license allocation.
2. B. QRadar EPS license allocation is implemented with a hard cutoff to ensure resources are not saturated.
3. C. During the spike, excess events are written to a queue, and they are processed after the EPS rate drops.
4. D. QRadar EPS licensing is measured as an average over a 24-hour period, which allows spikes to be handled gracefully. — đáp án hiện tại