Posted by: Pdfprep
Post Date: November 19, 2020
While on the Offense Summary page, a specific Category of Events associated with the Offense can be investigated.
Where should a Security Analyst click to view them?
A . Click on Events, then filter on Flows
B . Highlight the Category and click the Events icon
C . Scroll down to Categories and view Top 10 Source IPs
D . Right Click on Categories and choose Filter on Network Activity
Answer: B
Explanation:
Reference: IBM Security QRadar SIEM Users Guide. Page: 42
Leave a Reply