Exit C2150-624 IBM Security QRadar Risk Manager V7.2.6 Administration
Question 1 of 5
0% complete
Q1 Single choice

An Administrator has configured a customized log source extension to provide asset updates to IBM Security QRadar SIEM V7.2.8. Instead of QRadar receiving an update that has the host name of the asset that the user logged in to, the log source generates many asset updates that all have the same host name.
In this situation what will QRadar report?

  • A

    This will cause stale asset data.

  • B

    This will cause asset growth deviations.

  • C

    This will cause excessive authentication failure events.

  • D

    This will cause excessive flow data to be processed by the Magistrate.

Previous Next