QUESTION: 17

After working with an Offense, an analyst set the Offense as hidden. What does the analyst need to do to view the Offense at a later time?

Click Clear Filter next to the "Exclude Hidden Offenses".
In the all Offenses view, at the top of the view, select ‘’Show hidden‘’ from the ‘’Select an option‘’ drop- down.
In the al Offenses view, select Actions, then select show hidden Offenses.
Search for all Offenses owned by the analyst

Answer(s): A

Explanation:

To clear the filter on the offense list, click Clear Filter next to the Exclude Hidden Offenses search parameter.

Reference:

https://www.ibm.com/docs/fi/qradar-on-cloud?topic=actions-showing-hidden-offenses

Reveal Solution Next Question

QUESTION: 18

An analyst needs to identify which rules are most active in generating Offenses.
In the Offense tab, on the rules section, which column must be reordered in descending order to find this information?

Offense count
Response count
Event count
Flow count

Answer(s): B

Reveal Solution Next Question

QUESTION: 19

What is required to create an anomaly rule?

triggered events
a grouped saved search
triggered flows
baseline anomalies

Answer(s): A

Reveal Solution Next Question

QUESTION: 20

An analyst needs to investigate an Offense and navigates to the attached rule(s).
Where in the rule details would the analyst investigate the reason for why the rule was triggered?

Rule actions
List of test conditions
Rule responses
Rules response limiter

Answer(s): D

Reveal Solution Next Question

Free C1000-018 Exam Braindumps (page: 5)

QUESTION: 17

Explanation:

Reference:

QUESTION: 18

QUESTION: 19

QUESTION: 20