IBM Exam C1000-162 Topic 2 Question 25 Discussion

Actual exam question for IBM's C1000-162 exam

Question #: 25
Topic #: 2

What is an effective method to fix an event that is parsed an determined to be unknown or in the wrong QReader category/

ACreate a DSM extension to extract the category from the payload

BCreate a Custom Property to extract the proper Category from the payload

COpen the event details, select map event, and assign it to the correct category

DWrite a Custom Rule, and use Rule Response to send a new event in the proper category

Show Suggested Answer

Suggested Answer: B

The magnitude rating of an offense in QRadar is calculated based on relevance, severity, and credibility. Relevance determines the impact on the network, credibility indicates the integrity of the offense, and severity represents the level of threat. QRadar uses complex algorithms to calculate and periodically re-evaluate the offense magnitude rating.

by Jerrod at Sep 19, 2024, 02:40 AM

Limited Time Offer

25%

Off

Get Premium C1000-162 Questions as Interactive Web-Based Practice Test or PDF