Posted by: Pdfprep
Post Date: November 23, 2020
What happens if QRadar receives events at a higher rate than the license allows?
A . The events will be put into queues
B . The source system will be asked to resend the events later
C . The events will not be parsed
D . The events will be dropped immediately
Answer: A
Explanation:
Reference: https://www.ibm.com/support/pages/qradar-event-and-flow-burst-handling-buffer
Leave a Reply