Discuss IBM C1000-162 Exam Topic 1 Question 47

How can an analyst search for all events that include the keyword "access"?

AGo to the Network Activity tab and run a quick search with the 'access' keyword.

BGo to the Log Activity tab and run a quick search with the 'access' keyword.

CGo to the Offenses tab and run a quick search with the 'access' keyword.

DGo to the Log Activity tab and run this AOL: select * from events where eventname like 'access'.

Suggested Answer: B

In IBM Security QRadar SIEM V7.5, to search for all events containing a specific keyword such as 'access', an analyst should navigate to the 'Log Activity' tab. This section of the QRadar interface is dedicated to viewing and analyzing log data collected from various sources. By running a quick search with the 'access' keyword in the Log Activity tab, the analyst can filter out events that contain this term in any part of the log data. This functionality is crucial for identifying specific activities or incidents within the vast amounts of log data QRadar processes, allowing analysts to quickly hone in on relevant information for further investigation or action.

Get Premium C1000-162 Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

12 comments · newest first

Stephaine 3 months ago

D seems more technical, but it could be useful for detailed searches.

Myra 3 months ago

I agree, B makes sense. Quick search is efficient.

Laquanda 3 months ago

I think option B is the best choice. Log Activity is where events are listed.

Stefany 3 months ago

B is the best option, no doubt about it!

Shantay 3 months ago

Wait, can you really use that AOL query? Sounds off.

Percy 4 months ago

C is not the right tab for this.

Alaine 5 months ago

I thought it was A? Network Activity seems right.

Minna 5 months ago

Definitely B, that's where all the logs are!

Willetta 6 months ago

I’m confused about the difference between the Log Activity and Network Activity tabs. I might need to review that part again.

Cornell 6 months ago

I’m leaning towards option D because it mentions using an AOL query, which seems more precise for searching events.

Lea 6 months ago

I remember practicing a question similar to this, and I feel like the Network Activity tab was involved, but I'm not entirely sure.

Freeman 7 months ago

I think the Log Activity tab is where we usually search for specific events, so maybe option B is correct?

IBM C1000-162 Exam - Topic 1 Question 47 Discussion