What does it mean when a custom rule is partially matched in QRadar?

exams C1000-163 C1000-163 exam 0 Comments

What does it mean when a custom rule is partially matched in QRadar?
A . The rule is not fully enabled.
B . The AND NOT operator is set incorrectly in the first test.
C . All the tests in the rule were fully matched.
D . Not all the the tests in the rule were fully matched.

Answer: D