C1000-156: IBM Security QRadar SIEM v7.5 AdministrationDemo

By IBM · Question Mode

QuestionQ59

IBM Security QRadar SIEM v7.5 Administration

Which field is required when using the DSM Editor to map an event to a QID?

  • A High-level Category
  • B Low-level Category
  • C Event ID
  • D Event Category
Explanation

The Event ID is the mandatory value that identifies the event for QID mapping. Event Category further qualifies the mapping, while high-level and low-level categories are attributes of the selected QID categorization rather than the required event identifier.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!