Posted by: Pdfprep
Post Date: November 23, 2020
An administrator needs to import data into QRadar for a specific use case. The data that has been provided to the administrator is stored in records that map a key to a value.
Which type of data collection must the administrator create?
A . Reference set
B . Reference map of sets
C . Reference map
D . Reference map of maps
Answer: B
Explanation:
Reference: https://www.ibm.com/support/knowledgecenter/en/SS42VS_7.3.2/com.ibm.qradar.doc/t_qradar_conifig_rul_resp_reference_set.html
Leave a Reply