IBM

C2150-400 · Question #60

What is a benefit of enabling indexes on event properties?

The correct answer is B. Improved search performance. See the full explanation below for the reasoning.

Question

What is a benefit of enabling indexes on event properties?

Options

AImproved Offense Correlation
BImproved search performance
CImproved Performance of Custom Rules
DImproved accuracy of auto-discovery log sources

How the community answered

(23 responses)

A
4% (1)
B
78% (18)
C
13% (3)
D
4% (1)

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion

Full C2150-400 Practice