IBM Exam C1000-018 Topic 3 Question 2 Discussion

Actual exam question for IBM's C1000-018 exam

Question #: 2
Topic #: 3

QRadar collects information from numerous log sources and other agents. Sometimes these agents stop reporting to QRadar for a variety of reasons. There is a default rule in QRadar to help identify these cases called the Device Stopped Sending Events (DSSE) Rule.

What does the DSSE Rule do?

AIt checks for log sources which are reporting that they have not had any communication in a certain amount of time.

BIt checks for Rules which have fired due to an absence of Events.

CIt runs when there is an absence of Events.

DIt listens for log sources that send out regular health events and triggers the Rule when encountered

Show Suggested Answer

Suggested Answer: A

by Martina at May 05, 2022, 07:44 PM

Limited Time Offer

25%

Off

Get Premium C1000-018 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Currently there are no comments in this discussion, be the first to comment!