Which parameter determines the impact of the offense on the network?

Question

Options

• ARelevance
• BImpact
• CCredibility
• DSeverity

• A
  71% (41)
• B
  17% (10)
• C
  5% (3)
• D
  7% (4)

Explanation

Relevance is the parameter that measures how much impact an offense has on the network by evaluating the importance of the targeted assets - for example, a critical server being attacked scores higher relevance than a low-value endpoint. In IBM QRadar (the context this question typically comes from), offenses are scored on three dimensions: relevance, credibility, and severity, which together determine the overall magnitude.

Why the distractors are wrong:

• B. Impact is not one of the three named scoring parameters in QRadar - it's a general concept, not a defined field.
• C. Credibility measures the reliability and integrity of the offense data (i.e., how trustworthy the sources are), not network impact.
• D. Severity reflects the threat level posed by the attacker, not the impact on the network itself.

Memory tip: Think R-C-S (Relevance, Credibility, Severity) - Relevance = network impact, Credibility = source trustworthiness, Severity = attacker threat level. Since "relevance" relates to how relevant the target is to your organization, it naturally maps to network impact.

No community discussion yet for this question.