Home
Exams
Providers
About
Sign In
Sign Up
Home
/
Exams
/
IBM IBM Security QRadar SIEM V7.2.6 Associate Analyst
/
Question #2
#2
Multiple Choice
Mark for review
When might a Security Analyst want to review the payload of an event?
A.
When immediately after login, the dashboard notifies the analyst of payloads that must be investigated
B.
When "Review payload" is added to the offense description automatically by the "System: Notification" rule
C.
When the event is associated with an active offense, the payload may contain information that is not normalized or extracted fields
D.
When the event is associated with an active offense with a magnitude greater than 5, the payload should be reviewed, otherwise it is not necessary
Reveal Answer
Previous
Question 2 of 54
Exam C2150-612 Topic 1 Question 2
Back to all questions
Next
Sign In
Sign Up