Câu 16: C2150-614: IBM Security QRadar SIEM V7.2.7 Deployment

A Deployment Professional was asked to investigate the following error:Custom Rule Engine has detected a total of 20487 dropped event(s). 20487 event(s) were dropped in the last 62 seconds. Queue is at 99 percent capacityThe Deployment Professional needs to run the command"/opt/qradar/bin/findExpensiveCustomRules.sh" to gather the necessary troubleshooting logs. When should this command be run?

1. A. Right after a reboot
2. B. Run "service hostcontext restart" first
3. C. While the system is dropping events — đáp án hiện tại
4. D. Restart ECS, then run command