In the QRadar GUI. you notice that no new offenses were generated today. A review of the notifications shows: MPC: Unable to create new offense. The maximum number of active offenses has been…

The correct answer is D. 2500. In IBM QRadar SIEM V7.5, the default value for the maximum number of active offenses is set to 2500. This limit is in place to manage system performance and ensure efficient processing of security incidents. Here's the detailed information: Default Setting: The default setting…

Rule and Offense Management

Question

In the QRadar GUI. you notice that no new offenses were generated today. A review of the notifications shows:

MPC: Unable to create new offense. The maximum number of active offenses has been reached. What is the default value of the maximum number?

Options

A3500
B1500
C5000
D2500

How the community answered

(52 responses)

A
4% (2)
B
2% (1)
C
6% (3)
D
88% (46)

Explanation

In IBM QRadar SIEM V7.5, the default value for the maximum number of active offenses is set to 2500. This limit is in place to manage system performance and ensure efficient processing of security incidents. Here's the detailed information: Default Setting: The default setting for the maximum number of active offenses is 2500. Impact: If this limit is reached, QRadar will not generate new offenses until some of the existing offenses are closed or archived. Configuration: Administrators can adjust this setting based on their organizational needs, but the default value is 2500.

Topics

#offense limits#maximum active offenses#MPC#default settings

Community Discussion

No community discussion yet for this question.

Full C1000-156 Practice