IBM
C2150-400 · Question #18
A QRadar administrator needs to tune the system by enabling or disabling the appropriate rules in order to ensure that the QRadar console generates meaningful offenses for the environment. Which…
The correct answer is C. Offenses > Manage Custom Rules. See the full explanation below for the reasoning.
Question
A QRadar administrator needs to tune the system by enabling or disabling the appropriate rules in order to ensure that the QRadar console generates meaningful offenses for the environment. Which role permission is required for enabling and disabling the rule?
Options
- AOffenses > Maintain CRE Rules
- BOffenses > Toggle Custom Rules
- COffenses > Manage Custom Rules
- DOffenses > Maintain Custom Rules
How the community answered
(32 responses)- A9% (3)
- B3% (1)
- C81% (26)
- D6% (2)
Community Discussion
No community discussion yet for this question.