IBM
C1000-163 · Question #29
There are 10 retention buckets in Qradar SIEM. The default is placed in the last line with retention policy of 30 days. Action is set to delete the data immediately after retention period has…
The correct answer is B. Everything will be erased after 30 days. See the full explanation below for the reasoning.
Question
There are 10 retention buckets in Qradar SIEM. The default is placed in the last line with retention policy of 30 days. Action is set to delete the data immediately after retention period has expired. Admin creates another policy on top of the default policy to keep firewall data for 10 days. What will happen to the data after 30 days?
Options
- AFirewall data will be erased after 30 days
- BEverything will be erased after 30 days
- CEverything will be erased after 10 days
- DFirewall data will be erased after 10 days
How the community answered
(33 responses)- A12% (4)
- B82% (27)
- C3% (1)
- D3% (1)
Community Discussion
No community discussion yet for this question.