IBM Exam C1000-156 Topic 8 Question 23 Discussion

Actual exam question for IBM's C1000-156 exam

Question #: 23
Topic #: 8

A ORadar administrator creates a new saved search in QRadar and wants to add the search to a dashboard, but the option "Include in my Dashboard" cannot be selected.

What is a possible reason it is unavailable?

AThe search is not grouped.

BThe option is valid only for searches based on events.

CThe option is valid only for searches based on flows.

DThe user does not sufficient permissions.

Show Suggested Answer

Suggested Answer: D

If the option 'Include in my Dashboard' cannot be selected when creating a saved search in IBM QRadar SIEM V7.5, a possible reason is insufficient permissions. Here's why:

Permissions: The user needs appropriate permissions to add saved searches to the dashboard.

Role-Based Access Control: QRadar uses role-based access control to manage user permissions. The user's role must include the necessary privileges to modify dashboards.

Verification: Ensure that the user has the correct permissions assigned. This can be checked and adjusted in the user management settings.

Reference IBM QRadar SIEM administration guides explain the permissions required for various actions, including adding saved searches to dashboards, and how to configure user roles and permissions.

by Nichelle at Jan 25, 2025, 08:16 PM

Limited Time Offer

25%

Off

Get Premium C1000-156 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Kristine

2 days ago

Haha, I bet the search is trying to track down those elusive 'missing socks' in the washing machine. That's why the dashboard option is unavailable!

upvoted 0 times

...

Francoise

7 days ago

Hmm, I'm not sure about this one. Maybe it's because the search is not grouped? That's my guess, but I could be wrong.

upvoted 0 times

...

Fredric

12 days ago

I'm going with B. The option is only valid for searches based on events, not flows. That makes sense to me.

upvoted 0 times

...

Jacquline

16 days ago

I think Socorro might be right, it makes sense that the option is specific to event-based searches.

upvoted 0 times

...

Carman

26 days ago

I think the answer is D. The user doesn't have the necessary permissions to include the search in the dashboard. Without the right access, that option will be greyed out.

upvoted 0 times