Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Free Preparation Discussions
MENU
IBM Exam C1000-018 Topic 11 Question 34 Discussion
Actual exam question for
IBM's
C1000-018 exam
Question #: 34
Topic #: 11
[All C1000-018 Questions]
Topic #: 11
There are 5 authentication servers that report to different Event Processors. There is a requirement to generate an Offense if there are 5 consecutive failed logins detected across any of the 5 Event Processors.
Which type of rule should the analyst create?
Suggested Answer:
A
Global rules These rules use the Any domain modifier and run across all tenants.
Currently there are no comments in this discussion, be the first to comment!