IBM

C1000-127 · Question #21

An administrator creates a policy rule that sends information to a SIEM. How do they configure the rule actions?

The correct answer is C. Add an alert action with the correct named template for the SIEM. See the full explanation below for the reasoning.

Question

An administrator creates a policy rule that sends information to a SIEM. How do they configure the rule actions?

Options

AAdd a query rewrite action.
BAdd an action to attach the session using S-GATE.
CAdd an alert action with the correct named template for the SIEM.
DNo action is necessary because IBM Guardium sends information to SIEM by default.

How the community answered

(21 responses)

A
5% (1)
B
19% (4)
C
71% (15)
D
5% (1)

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion

Full C1000-127 Practice