Posted by: Pdfprep
Post Date: November 23, 2020
Which event routing rule is required to add QRadar Data Store (QDS) capability to a deployment?
A . Log Only (exclude Analytics)
B . Delete data When storage space is required
C . Bypass Correlation
D . Delete data immediately after the retention period has expired
Answer: A
Explanation:
Reference: https://www.ibm.com/support/knowledgecenter/en/SS42VS_7.3.2/com.ibm.qradar.doc/t_qradar_adm_data_store.html
Leave a Reply