What domain text should the administrator use to create this rule?

A company has two different domains in their IBM QRadar system: Domain_A and Domain_B. An administrator has been tasked to create a rule to look only at events that are tagged with Domain_A and ignore rules that are tagged with the other domains.

What domain text should the administrator use to create this rule?
A . is from domain: Domain_A
B . from domain: Domain_A
C . domain is: Domain_A
D . domain is one of: Domain_A

View Answer

Answer: D

Explanation:

Reference: https://www.ibm.com/support/knowledgecenter/en/SS42VS_7.3.1/com.ibm.qradar.doc/c_domain_specific_rules_offenses.html