nerdexam
IBM

C1000-163 · Question #100

How can a QRadar user visualize the rules for MITRE ATT&CK coverage in Use Case Manager?

The correct answer is C. Use Case Explorer > ATT&CK Actions > Coverage map and report. See the full explanation below for the reasoning.

Question

How can a QRadar user visualize the rules for MITRE ATT&CK coverage in Use Case Manager?

Options

  • AUse Case Manager > Active Rules
  • BUse Case Manager > Settings > Sync QID Records
  • CUse Case Explorer > ATT&CK Actions > Coverage map and report
  • DUse Case Explorer > under Rule and Building Block Filter, select Rule > click Apply Filter

How the community answered

(32 responses)
  • A
    13% (4)
  • B
    3% (1)
  • C
    81% (26)
  • D
    3% (1)

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full C1000-163 Practice