IBM Exam C1000-018 Topic 7 Question 17 Discussion

Actual exam question for IBM's C1000-018 exam

Question #: 17
Topic #: 7

When an Offense is triggered, it only shows the events that triggered the Offense. The analyst wants to investigate further to see more events around the incident, not only those that triggered the Offense. The analyst clicks on the event count and sees the events belonging to the Offense.

How can the analyst processed to see a more detailed picture of what occurred?

ARight-click on the destination IP, and choose More Options, then Raw Events.

BRight-click on the source IP, and choose More Options, then Information, and then Search Events

CRight-click and filter on the Destination IP.

DRight-click on the source IP, and choose View in DSM Editor.

Show Suggested Answer

Suggested Answer: D

by Stephaine at May 08, 2022, 04:05 PM

Limited Time Offer

25%

Off

Get Premium C1000-018 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Currently there are no comments in this discussion, be the first to comment!