Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

IBM Exam C1000-140 Topic 2 Question 61 Discussion

Actual exam question for IBM's C1000-140 exam
Question #: 61
Topic #: 2
[All C1000-140 Questions]

A QRadar deployment professional needs to add a managed host to help reduce the load on the QRadar Console.

The managed host should have local storage and also use the QRadar Custom Rule Engine.

Which managed host does the deployment professional add?

Show Suggested Answer Hide Answer
Suggested Answer: D

Contribute your Thoughts:

Chuck
10 days ago
But an Event Processor can handle the load and use the Custom Rule Engine efficiently.
upvoted 0 times
...
Deeanna
16 days ago
I'm going with C) Disconnected Log Collector. It has local storage, which seems important for this deployment.
upvoted 0 times
...
Rolf
17 days ago
D) Event Processor sounds like the right choice to me. It can handle the load reduction on the Console.
upvoted 0 times
...
Hyun
23 days ago
I think the best option is a Disconnected Log Collector.
upvoted 0 times
...
Twila
24 days ago
I disagree, I believe the managed host should be an App Host.
upvoted 0 times
...
Rossana
26 days ago
Hmm, I think the answer is B) App Host. It's the only option that mentions using the QRadar Custom Rule Engine.
upvoted 0 times
Lonna
2 days ago
Yes, the App Host is designed to handle custom rule engine and local storage.
upvoted 0 times
...
Tu
18 days ago
I agree, the App Host is the right choice for this scenario.
upvoted 0 times
...
...
Chuck
1 months ago
I think the managed host should be an Event Processor.
upvoted 0 times
...

Save Cancel