If an IBM Security QRadar V7.0 MR4operator wants to detect a specific data string in the flow content, which search parameter should be used as a filter?

The correct answer is D. Source Payload Contains. See the full explanation below for the reasoning.

Question

Options

ASource IP
BEvent Name
CRemote Network
DSource Payload Contains

How the community answered

(20 responses)

A
5% (1)
B
5% (1)
C
15% (3)
D
75% (15)

Community Discussion

No community discussion yet for this question.

Full A2150-195 Practice