MENU
What is the most restrictive permissions a user needs in order to see all of the events from a particular log source in the Log Activity tab?
Suggested Answer: D
Get Premium C1000-156 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
If the option 'Include in my Dashboard' cannot be selected when creating a saved search in IBM QRadar SIEM V7.5, a possible reason is insufficient permissions. Here's why:
Permissions: The user needs appropriate permissions to add saved searches to the dashboard.
Role-Based Access Control: QRadar uses role-based access control to manage user permissions. The user's role must include the necessary privileges to modify dashboards.
Verification: Ensure that the user has the correct permissions assigned. This can be checked and adjusted in the user management settings.
Reference IBM QRadar SIEM administration guides explain the permissions required for various actions, including adding saved searches to dashboards, and how to configure user roles and permissions.
32 comments · newest first
LA
Latosha
11 months ago
I thought it was C at first, but B seems more accurate now.
JO
Jodi
11 months ago
A is definitely not it, you don’t need both Networks and Log Sources.
BE
Bethanie
11 months ago
Wait, are we sure about that? What if D is actually the right one?
DI
Diane
11 months ago
Totally agree, B makes the most sense here!
HA
Harrison
12 months ago
I think option B is correct. You need that log source in your profile.
BI
Billye
12 months ago
I’m leaning towards option B because it seems to cover both the log source and the necessary permissions, but I could be mixing it up with another question.
EM
Emilio
12 months ago
I feel like option D sounds familiar, but I can't recall if the precedence setting is really necessary for just viewing logs.
KI
Kirk
1 year ago
I remember a practice question that mentioned something about needing access to both Networks and Log Sources. That might be relevant here.
FE
Felice
1 year ago
I think the user needs to have their security profile include the specific log source, but I'm not sure if it also needs permissions for Networks.
LO
Lorean
1 year ago
I feel pretty confident about this one. The answer seems clear to me based on my understanding of the log activity permissions. I'll double-check, but I think I've got it.
LA
Launa
1 year ago
Alright, I've got a strategy here. I'll focus on the most restrictive permissions needed, and then match that to the options provided. Gotta be thorough on this one.
MI
Micaela
1 year ago
I'm a bit confused on this one. The wording is a bit tricky, and I want to make sure I understand the requirements fully before selecting an answer.
ER
Eric
1 year ago
Okay, let's see. I think the key here is understanding what permissions are required to view the log activity. I'll need to review the options closely.
ST
Stefania
1 year ago
Hmm, this seems like a tricky one. I'll need to think through the different permissions and access levels carefully.
ES
Estrella
1 year ago
Did someone say 'log source'? I thought this was a question about lumberjacking. Where's my axe?
JU
Judy
1 year ago
I'm pretty sure it's C) A user needs access to Flow Sources Only.
AL
Alyce
1 year ago
Actually, I think it's A) The user needs access to the Networks AND Log Sources to see a particular log in the activity tab.
TY
Ty
1 year ago
No, I believe it's D) The log source must be included in the user's security profile and the profile needs its precedence set to Log Sources Only.
SH
Sherita
1 year ago
I think the answer is B) The user's security profile must include that log source, and the profile needs permission to Networks AND Log Sources.
YV
Yvette
2 years ago
I'm going with B. It seems the most comprehensive and restrictive option, which is what the question is asking for.
CE
Celestine
1 year ago
Yeah, B covers all the bases for restricting access to the log source.
FI
Filiberto
1 year ago
I agree, B seems like the most secure option.
FR
France
2 years ago
Haha, C is definitely wrong. Flow Sources Only? That's like asking for a pizza with no cheese or toppings!
MA
Marshall
2 years ago
Hmm, I'm not sure about this one. I was thinking it might be D, since the log source has to be in the user's profile and the profile needs to be set to Log Sources Only.
CH
Cherry
1 year ago
I agree with you, it does sound like D is the correct answer.
MA
Martha
1 year ago
I'm not sure, but I think it might be A, the user needs access to the Networks AND Log Sources to see a particular log in the activity tab.
DE
Desmond
1 year ago
No, I believe it's actually D, the log source must be included in the user's security profile and the profile needs its precedence set to Log Sources Only.
BE
Bette
1 year ago
I think it's B, the user's security profile must include that log source and have permission to Networks AND Log Sources.
CA
Candra
2 years ago
I'm not sure about that. I think it might be D) The log source must be included in the user's security profile and the profile needs its precedence set to Log Sources Only.
CE
Cecilia
2 years ago
I agree with Christiane. The user needs access to both Networks and Log Sources to see all events from a particular log source in the Log Activity tab.
JO
Johnetta
2 years ago
I think the correct answer is B. The user's security profile needs to include that specific log source, and the profile also needs permission to Networks AND Log Sources.
CH
Christiane
2 years ago
I think the answer is B) The user's security profile must include that log source, and the profile needs permission to Networks AND Log Sources.