Câu 12: C2150-614: IBM Security QRadar SIEM V7.2.7 Deployment
A Deployment Professional is alerted that flows between two assets within a local network are communicating at a higher rate than normal between midnight and2 a.m. The Deployment Professional is asked to determine why this is occurring and decides to create an alert that will send a notification when the communication…
Nội dung câu hỏi
A Deployment Professional is alerted that flows between two assets within a local network are communicating at a higher rate than normal between midnight and2 a.m. The Deployment Professional is asked to determine why this is occurring and decides to create an alert that will send a notification when the communication happens again. Which action could be used?
Các lựa chọn
Đáp án được giữ gọn theo nhãn A, B, C, D trong phần bình chọn tương tác.
- A. Run an AQL query
- B. Perform Quick search
- C. Perform Custom search
- D. Create rule to test for events/flows — đáp án hiện tại
Cộng đồng
0 bình luận công khai. Tên thành viên được ẩn một phần.