Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

IBM C1000-156 Exam - Topic 5 Question 43 Discussion

How can you configure a log source to provide events to different domains?
C) Use custom properties to assign events from a single log source to different domains.
A) Create a saved search on the Network Activity tab to view events in specific domains.
B) Use the Assistant app to update the domain information for the log source.
D) Use the Use Case Manager app to update building blocks to support multi domain events.

IBM C1000-156 Exam - Topic 5 Question 43 Discussion

Actual exam question for IBM's C1000-156 exam
Question #: 43
Topic #: 5
[All C1000-156 Questions]

How can you configure a log source to provide events to different domains?

Show Suggested Answer Hide Answer
Suggested Answer: C

To configure a log source in IBM QRadar SIEM V7.5 to provide events to different domains, administrators can use custom properties. Here's how it works:

Custom Properties: Create and configure custom properties to tag events with specific domain information.

Assigning Events: When events are ingested from a log source, these custom properties can be used to dynamically assign events to different domains based on predefined criteria.

Domain Management: This approach allows flexibility in managing and segregating data from a single log source across multiple domains, ensuring that each domain receives the relevant events.

Reference The configuration of custom properties for domain assignment is detailed in the QRadar SIEM administration guides, providing step-by-step instructions for setting up and using custom properties for domain management.


Contribute your Thoughts:

0/2000 characters
Anglea
8 hours ago
C is the way to go for assigning events to different domains.
upvoted 0 times
...
Iluminada
5 days ago
I’m a bit confused about this one. I thought saved searches were more for viewing data rather than configuring log sources, so I’m leaning away from A.
upvoted 0 times
...
Carissa
11 days ago
I practiced a similar question where we had to manage events across domains, and I think it was about using the Use Case Manager. So maybe D is the right choice?
upvoted 0 times
...
Colby
16 days ago
I'm not entirely sure, but I feel like the Assistant app might be involved in updating log sources. Could it be option B?
upvoted 0 times
...
Coletta
2 months ago
I think I remember something about using custom properties to categorize events, so maybe option C is correct?
upvoted 0 times
...

Save Cancel