Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

IBM Exam C1000-156 Topic 6 Question 26 Discussion

Actual exam question for IBM's C1000-156 exam
Question #: 26
Topic #: 6
[All C1000-156 Questions]

When creating an identity exclusion search, what time range do you select?

Show Suggested Answer Hide Answer
Suggested Answer: B

When creating an identity exclusion search in IBM QRadar SIEM V7.5, the time range selected is 'Real time (streaming).' This setting ensures that the search continuously monitors and excludes identities in real-time as data is ingested. Here's the process:

Real-time Monitoring: Continuously updates the search results based on incoming data, providing immediate exclusion of specified identities.

Streaming Data: Processes data in a live stream, ensuring that the exclusion criteria are applied instantaneously as new events occur.

Reference The setup and configuration of identity exclusion searches are detailed in the QRadar SIEM administration guides, highlighting the importance of real-time streaming for effective identity management.


Contribute your Thoughts:

Dalene
1 days ago
A. Previous 7 days is the way to go. It's a nice sweet spot between real-time and long-term history.
upvoted 0 times
...
Rosio
2 days ago
That's a good point, maybe C) Previous 30 days is the better option after all.
upvoted 0 times
...
Felton
9 days ago
D. Previous 5 minutes? Are they testing our reflexes or our security knowledge? Definitely not that one!
upvoted 0 times
...
Craig
11 days ago
C. Previous 30 days seems like the logical choice to me. Who needs real-time when you can just look at the past month?
upvoted 0 times
Carey
7 days ago
A) Previous 7 days
upvoted 0 times
...
...
Kizzy
12 days ago
But wouldn't it make more sense to have a wider time range for identity exclusion search?
upvoted 0 times
...
Rosio
16 days ago
I disagree, I believe the answer is A) Previous 7 days.
upvoted 0 times
...
Kizzy
21 days ago
I think the answer is C) Previous 30 days.
upvoted 0 times
...
Brianne
24 days ago
I think the answer is B. Real-time (streaming) since that's the most up-to-date information.
upvoted 0 times
Juan
4 days ago
I prefer to choose C) Previous 30 days to have a broader search range.
upvoted 0 times
...
Ashton
10 days ago
I usually select A) Previous 7 days for identity exclusion searches.
upvoted 0 times
...
Leota
15 days ago
I think the answer is B. Real-time (streaming) since that's the most up-to-date information.
upvoted 0 times
...
...

Save Cancel