Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

IBM Exam C1000-156 Topic 6 Question 32 Discussion

Actual exam question for IBM's C1000-156 exam
Question #: 32
Topic #: 6
[All C1000-156 Questions]

In the QRadar GUI. you notice that no new offenses were generated today. A review of the notifications shows:

MPC: Unable to create new offense. The maximum number of active offenses has been reached.

What is the default value of the maximum number?

Show Suggested Answer Hide Answer
Suggested Answer: D

In IBM QRadar SIEM V7.5, the default value for the maximum number of active offenses is set to 2500. This limit is in place to manage system performance and ensure efficient processing of security incidents. Here's the detailed information:

Default Setting: The default setting for the maximum number of active offenses is 2500.

Impact: If this limit is reached, QRadar will not generate new offenses until some of the existing offenses are closed or archived.

Configuration: Administrators can adjust this setting based on their organizational needs, but the default value is 2500.

Reference This information is detailed in the QRadar SIEM configuration and tuning guides, which specify default settings and provide instructions for modifying the maximum number of active offenses if necessary.


Contribute your Thoughts:

Kallie
1 days ago
I'm pretty sure it's 5000. That's the default maximum for QRadar offenses, right?
upvoted 0 times
...

Save Cancel