What happens if QRadar receives events at a higher rate than the license allows?

Posted by: Pdfprep Category: C1000-026 Tags: , ,

What happens if QRadar receives events at a higher rate than the license allows?
A . The events will be put into queues
B . The source system will be asked to resend the events later
C . The events will not be parsed
D . The events will be dropped immediately

Answer: A

Explanation:

Reference: https://www.ibm.com/support/pages/qradar-event-and-flow-burst-handling-buffer

Leave a Reply

Your email address will not be published.