Exit C1000-018 IBM QRadar SIEM V7.3.2 Fundamental Analysis
Question 4 of 5
0% complete
Q4 Single choice

An analyst needs to use a new custom property in a rule.

What must be the mandatory characteristic of the custom property?

  • A

    It must be shared.

  • B

    It must be boolean.

  • C

    It must be stored.

  • D

    It must be extracted.

Previous Next