C1000-156: IBM Security QRadar SIEM v7.5 AdministrationDemo

By IBM · Question Mode

QuestionQ11

IBM Security QRadar SIEM v7.5 Administration

What is one benefit of a lazy search?

  • A Searching across domains for any configured user
  • B Getting results that are limited to a specific range
  • C Providing every result no matter the quantity of the search results
  • D Finding IOCs quickly
Explanation

A QRadar lazy search quickly identifies indicators of compromise (IOCs) by returning the first limited set of events related to the search criteria, so an analyst can investigate without reviewing every matching event.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!