IBM
C2150-196 · Question #69
Which statement best describes the expected increase in forensic capabilities when IBM Security QRadar QFlow (QRadar QFlow) is implemented?
The correct answer is D. QRadar QFlow tracks the history of stateful connections and monitors for unique characteristics. See the full explanation below for the reasoning.
Question
Which statement best describes the expected increase in forensic capabilities when IBM Security QRadar QFlow (QRadar QFlow) is implemented?
Options
- AIBM Security QRadar VFlow allows for QRadar QFlow collection on hypervisors such as Microsoft
- BQRadar QFlow provides visibility only at layers three and four, providing header information
- CNetFlow provides deep packet inspection, up to layer seven of the OSI model, giving visibility on
- DQRadar QFlow tracks the history of stateful connections and monitors for unique characteristics
How the community answered
(26 responses)- A12% (3)
- B4% (1)
- C4% (1)
- D81% (21)
Community Discussion
No community discussion yet for this question.