Question 31
A custom rule is generating events reporting that a specific user is failing to login too many times in the last 5 minutes. The administrator opens the event details to investigate the anomaly associated with the events but finds that no Anomaly details pane is shown.
What is the reason?
The events were generated by:
Question 32
An administrator needs to import a list of HR staff logins into a reference set.
Which file type can be used with the import function in the reference set editor window?
Question 33
An administrator installed a new App Host and would like to move the existing applications from the Console to the App Host.
What steps should be performed?
Question 34
An administrator would like to categorize discovered assets by port definitions and add this information to a server type building block for further use.
Which QRadar Console functionality should the administrator use?
Question 35
An administrator needs to complete the upgrade process from V7.3.1 to V7.3.2.
What is the correct procedure?