What happens with the events when they go over the allocated amount?

A deployment professional sees that there are occasional spikes in the EPS (Events per second). The host has 1000 EPS allocated but the occasional spikes go up to 1185 EPS.

What happens with the events when they go over the allocated amount?
A . Events are shown normally, but no offenses are generated.
B . Events are moved to a temporary queue.
C . Events are shown normally, QRadar has 20% buffer.
D . Events are dropped.

View Answer

Answer: B