C1000-156 · Question #4
When creating an identity exclusion search, what time range do you select?
The correct answer is B. Real time (streaming). When creating an identity exclusion search in IBM QRadar SIEM V7.5, the time range selected is "Real time (streaming)." This setting ensures that the search continuously monitors and excludes identities in real-time as data is ingested. Here's the process: Real-time Monitoring…
Question
When creating an identity exclusion search, what time range do you select?
Options
- APrevious 7 days
- BReal time (streaming)
- CPrevious 30 days
- DPrevious 5 minutes
How the community answered
(36 responses)- A3% (1)
- B94% (34)
- C3% (1)
Explanation
When creating an identity exclusion search in IBM QRadar SIEM V7.5, the time range selected is "Real time (streaming)." This setting ensures that the search continuously monitors and excludes identities in real-time as data is ingested. Here's the process: Real-time Monitoring: Continuously updates the search results based on incoming data, providing immediate exclusion of specified identities. Streaming Data: Processes data in a live stream, ensuring that the exclusion criteria are applied instantaneously as new events occur.
Topics
Community Discussion
No community discussion yet for this question.