McAfee
MA0-104 · Question #51
Be default, events in McAfee SIEM are aggregated on which of the following three fields?
The correct answer is B. Signature ID, Source IP, Destination IP. See the full explanation below for the reasoning.
Question
Be default, events in McAfee SIEM are aggregated on which of the following three fields?
Options
- ASignature ID, Source IP, Source Port
- BSignature ID, Source IP, Destination IP
- CSignature ID, Destination IP, Source User
- DSignature ID, Event ID, Source IP
How the community answered
(46 responses)- A4% (2)
- B83% (38)
- C11% (5)
- D2% (1)
Community Discussion
No community discussion yet for this question.