To provide insight into why QRadar considers the event to be threatening, what does QRadar add to the Offense that users cannot edit or delete?

To provide insight into why QRadar considers the event to be threatening, what does QRadar add to the Offense that users cannot edit or delete?
A . Annotations
B . Attack path
C . Location
D . Source IP

Answer: A

Explanation: https://www.ibm.com/docs/en/qsip/7.4?topic=investigations-investigating-offense-by-using-summary-information

Annotations provide insight into why QRadar considers the event or observed traffic to be threatening.

QRadar can add annotations when it adds events or flows to an offense. The oldest annotation shows information that QRadar added when the offense was created. Users cannot add, edit, or delete annotations.

Latest C1000-018 Dumps Valid Version with 60 Q&As

Latest And Valid Q&A | Instant Download | Once Fail, Full Refund

Subscribe
Notify of
guest
0 Comments
Inline Feedbacks
View all comments