Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

IBM C1000-156 Exam - Topic 5 Question 43 Discussion

How can you configure a log source to provide events to different domains?
C) Use custom properties to assign events from a single log source to different domains.
A) Create a saved search on the Network Activity tab to view events in specific domains.
B) Use the Assistant app to update the domain information for the log source.
D) Use the Use Case Manager app to update building blocks to support multi domain events.

IBM C1000-156 Exam - Topic 5 Question 43 Discussion

Actual exam question for IBM's C1000-156 exam
Question #: 43
Topic #: 5
[All C1000-156 Questions]

How can you configure a log source to provide events to different domains?

Show Suggested Answer Hide Answer
Suggested Answer: C

To configure a log source in IBM QRadar SIEM V7.5 to provide events to different domains, administrators can use custom properties. Here's how it works:

Custom Properties: Create and configure custom properties to tag events with specific domain information.

Assigning Events: When events are ingested from a log source, these custom properties can be used to dynamically assign events to different domains based on predefined criteria.

Domain Management: This approach allows flexibility in managing and segregating data from a single log source across multiple domains, ensuring that each domain receives the relevant events.

Reference The configuration of custom properties for domain assignment is detailed in the QRadar SIEM administration guides, providing step-by-step instructions for setting up and using custom properties for domain management.


Contribute your Thoughts:

0/2000 characters
Janna
4 days ago
B is not practical. Updating domain info manually is tedious.
upvoted 0 times
...
Gennie
9 days ago
A saved search is too limited. I’d skip A.
upvoted 0 times
...
Jacquelyne
14 days ago
Option D could work too, but seems more complex.
upvoted 0 times
...
Bette
19 days ago
I agree, C makes sense. It allows for precise event assignment.
upvoted 0 times
...
Royce
24 days ago
I think option C is the best choice. Custom properties are flexible.
upvoted 0 times
...
Jacob
30 days ago
Totally agree with C, it's the most flexible approach!
upvoted 0 times
...
Jutta
1 month ago
Wait, can you really use the Assistant app for this? Sounds odd.
upvoted 0 times
...
Ettie
1 month ago
A seems too limited for this task.
upvoted 0 times
...
Lemuel
2 months ago
I think D is also a solid option for multi-domain support.
upvoted 0 times
...
Stevie
2 months ago
C is the way to go for assigning events to different domains.
upvoted 0 times
...
Isabella
2 months ago
B is a quick fix, but not the best long-term solution.
upvoted 0 times
...
Rebbeca
2 months ago
Wait, can you really use the Assistant app for this? Sounds odd.
upvoted 0 times
...
Laura
2 months ago
A is just for viewing, not configuring.
upvoted 0 times
...
Aimee
2 months ago
I disagree, D seems more effective for multi-domain support.
upvoted 0 times
...
Anglea
3 months ago
C is the way to go for assigning events to different domains.
upvoted 0 times
...
Iluminada
3 months ago
I’m a bit confused about this one. I thought saved searches were more for viewing data rather than configuring log sources, so I’m leaning away from A.
upvoted 0 times
...
Carissa
3 months ago
I practiced a similar question where we had to manage events across domains, and I think it was about using the Use Case Manager. So maybe D is the right choice?
upvoted 0 times
...
Colby
3 months ago
I'm not entirely sure, but I feel like the Assistant app might be involved in updating log sources. Could it be option B?
upvoted 0 times
...
Coletta
5 months ago
I think I remember something about using custom properties to categorize events, so maybe option C is correct?
upvoted 0 times
...

Save Cancel