C1000-156: IBM Security QRadar SIEM v7.5 AdministrationDemo

By IBM · Question Mode

QuestionQ6

IBM Security QRadar SIEM v7.5 Administration

To detect outliers, which Anomaly Detection Engine rule tests events or flows for volume changes occurring in regular patterns?

  • A Threshold rules
  • B Anomaly rules
  • C Building block rules
  • D Behavioral rules
Explanation

Behavioral rules learn the normal rate or volume of a property over a defined season and identify significant deviations from that regular pattern as outliers.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!