5:["$","div",null,{"className":"min-h-[calc(100vh_-_156px)] sm:min-h-[calc(100vh_-_166px)] flex w-full flex-col items-center bg-muted/60 sm:px-6","children":["$","div",null,{"className":"w-full max-w-[1110px] space-y-8 py-8 lg:space-y-10 lg:py-10","children":[["$","nav",null,{"aria-label":"breadcrumb","className":"px-4 sm:px-0","children":["$","ol",null,{"className":"flex flex-wrap items-center gap-1.5 break-words text-sm text-muted-foreground sm:gap-2.5","children":[["$","$18","/",{"children":[["$","li",null,{"className":"inline-flex items-center gap-1.5","children":["$","a",null,{"className":"-mx-1.5 rounded px-1.5 py-0.5 transition duration-300 hover:bg-stone-200/60 hover:text-stone-500 active:bg-stone-200/80","href":"/","children":"Home"}]}],["$","li",null,{"role":"presentation","aria-hidden":"true","className":"[&>svg]:size-3.5","children":["$","svg",null,{"width":"15","height":"15","viewBox":"0 0 15 15","fill":"none","xmlns":"http://www.w3.org/2000/svg","children":["$","path",null,{"d":"M6.1584 3.13508C6.35985 2.94621 6.67627 2.95642 6.86514 3.15788L10.6151 7.15788C10.7954 7.3502 10.7954 7.64949 10.6151 7.84182L6.86514 11.8418C6.67627 12.0433 6.35985 12.0535 6.1584 11.8646C5.95694 11.6757 5.94673 11.3593 6.1356 11.1579L9.565 7.49985L6.1356 3.84182C5.94673 3.64036 5.95694 3.32394 6.1584 3.13508Z","fill":"currentColor","fillRule":"evenodd","clipRule":"evenodd"}]}]}]]}],["$","$18","/forum/",{"children":[["$","li",null,{"className":"inline-flex items-center gap-1.5","children":["$","a",null,{"className":"-mx-1.5 rounded px-1.5 py-0.5 transition duration-300 hover:bg-stone-200/60 hover:text-stone-500 active:bg-stone-200/80","href":"/forum/","children":"Forum"}]}],["$","li",null,{"role":"presentation","aria-hidden":"true","className":"[&>svg]:size-3.5","children":["$","svg",null,{"width":"15","height":"15","viewBox":"0 0 15 15","fill":"none","xmlns":"http://www.w3.org/2000/svg","children":["$","path",null,{"d":"M6.1584 3.13508C6.35985 2.94621 6.67627 2.95642 6.86514 3.15788L10.6151 7.15788C10.7954 7.3502 10.7954 7.64949 10.6151 7.84182L6.86514 11.8418C6.67627 12.0433 6.35985 12.0535 6.1584 11.8646C5.95694 11.6757 5.94673 11.3593 6.1356 11.1579L9.565 7.49985L6.1356 3.84182C5.94673 3.64036 5.95694 3.32394 6.1584 3.13508Z","fill":"currentColor","fillRule":"evenodd","clipRule":"evenodd"}]}]}]]}],["$","$18","/forum/ibm/",{"children":[["$","li",null,{"className":"inline-flex items-center gap-1.5","children":["$","a",null,{"className":"-mx-1.5 rounded px-1.5 py-0.5 transition duration-300 hover:bg-stone-200/60 hover:text-stone-500 active:bg-stone-200/80","href":"/forum/ibm/","children":"IBM"}]}],["$","li",null,{"role":"presentation","aria-hidden":"true","className":"[&>svg]:size-3.5","children":["$","svg",null,{"width":"15","height":"15","viewBox":"0 0 15 15","fill":"none","xmlns":"http://www.w3.org/2000/svg","children":["$","path",null,{"d":"M6.1584 3.13508C6.35985 2.94621 6.67627 2.95642 6.86514 3.15788L10.6151 7.15788C10.7954 7.3502 10.7954 7.64949 10.6151 7.84182L6.86514 11.8418C6.67627 12.0433 6.35985 12.0535 6.1584 11.8646C5.95694 11.6757 5.94673 11.3593 6.1356 11.1579L9.565 7.49985L6.1356 3.84182C5.94673 3.64036 5.95694 3.32394 6.1584 3.13508Z","fill":"currentColor","fillRule":"evenodd","clipRule":"evenodd"}]}]}]]}],["$","$18","/forum/ibm/HOLCfXPO99/",{"children":[["$","li",null,{"className":"inline-flex items-center gap-1.5","children":["$","span",null,{"role":"link","aria-disabled":"true","aria-current":"page","className":"font-normal text-muted-foreground","children":"C1000-140 - Question 61"}]}],false]}]]}]}],["$","section","HOLCfXPO99",{"className":"mx-auto space-y-8 rounded bg-white px-6 pb-2 pt-10 md:pb-4 md:pt-12","children":[["$","div",null,{"className":"mx-auto max-w-[740px] rounded border-l-8 border-brand-active bg-brand p-6","children":["$","div",null,{"className":"flex flex-col items-center justify-between gap-4 md:flex-row","children":[["$","div",null,{"className":"flex items-center gap-x-4","children":[["$","svg",null,{"width":"15","height":"15","viewBox":"0 0 15 15","fill":"none","xmlns":"http://www.w3.org/2000/svg","className":"hidden size-8 text-white md:block","children":["$","path",null,{"d":"M3 2.5C3 2.22386 3.22386 2 3.5 2H9.08579C9.21839 2 9.34557 2.05268 9.43934 2.14645L11.8536 4.56066C11.9473 4.65443 12 4.78161 12 4.91421V12.5C12 12.7761 11.7761 13 11.5 13H3.5C3.22386 13 3 12.7761 3 12.5V2.5ZM3.5 1C2.67157 1 2 1.67157 2 2.5V12.5C2 13.3284 2.67157 14 3.5 14H11.5C12.3284 14 13 13.3284 13 12.5V4.91421C13 4.51639 12.842 4.13486 12.5607 3.85355L10.1464 1.43934C9.86514 1.15804 9.48361 1 9.08579 1H3.5ZM4.5 4C4.22386 4 4 4.22386 4 4.5C4 4.77614 4.22386 5 4.5 5H7.5C7.77614 5 8 4.77614 8 4.5C8 4.22386 7.77614 4 7.5 4H4.5ZM4.5 7C4.22386 7 4 7.22386 4 7.5C4 7.77614 4.22386 8 4.5 8H10.5C10.7761 8 11 7.77614 11 7.5C11 7.22386 10.7761 7 10.5 7H4.5ZM4.5 10C4.22386 10 4 10.2239 4 10.5C4 10.7761 4.22386 11 4.5 11H10.5C10.7761 11 11 10.7761 11 10.5C11 10.2239 10.7761 10 10.5 10H4.5Z","fill":"currentColor","fillRule":"evenodd","clipRule":"evenodd"}]}],["$","div",null,{"className":"flex flex-col","children":[["$","span",null,{"className":"text-center text-lg text-white md:text-left","children":["Exam ","C1000-140"," All Questions"]}],["$","span",null,{"className":"text-center text-sm text-white md:text-left","children":"Browse all questions from this exam"}]]}]]}],["$","div",null,{"className":"flex items-center","children":["$","$Lc",null,{"href":"/exam/c1000-140","className":"inline-flex items-center font-medium justify-center whitespace-nowrap rounded text-sm transition-colors focus-visible:outline-none focus-visible:ring-1 focus-visible:ring-ring disabled:pointer-events-none disabled:opacity-50 text-white hover:bg-brand-hover active:bg-brand-active h-9 px-4 py-2 bg-brand-active","children":[["$","span",null,{"children":"Go to Exam"}],["$","svg",null,{"width":"15","height":"15","viewBox":"0 0 15 15","fill":"none","xmlns":"http://www.w3.org/2000/svg","className":"ml-2 size-4","children":["$","path",null,{"d":"M6.1584 3.13508C6.35985 2.94621 6.67627 2.95642 6.86514 3.15788L10.6151 7.15788C10.7954 7.3502 10.7954 7.64949 10.6151 7.84182L6.86514 11.8418C6.67627 12.0433 6.35985 12.0535 6.1584 11.8646C5.95694 11.6757 5.94673 11.3593 6.1356 11.1579L9.565 7.49985L6.1356 3.84182C5.94673 3.64036 5.95694 3.32394 6.1584 3.13508Z","fill":"currentColor","fillRule":"evenodd","clipRule":"evenodd"}]}]]}]}]]}]}],["$","div",null,{"className":"mx-auto max-w-[740px] space-y-8","children":[["$","div",null,{"className":"rounded border-l-8 border-stone-300 bg-muted/60 p-6","children":["$","span",null,{"className":"flex items-center gap-2 text-sm font-medium text-stone-700 md:text-base","children":[["$","svg",null,{"width":"15","height":"15","viewBox":"0 0 15 15","fill":"none","xmlns":"http://www.w3.org/2000/svg","className":"size-5","children":["$","path",null,{"d":"$19","fill":"currentColor","fillRule":"evenodd","clipRule":"evenodd"}]}],"Question ",61]}]}],["$","article",null,{"className":"prose prose-sm prose-stone max-w-full md:prose-base","dangerouslySetInnerHTML":{"__html":"

Which log source should be used to filter QRadar audit events?

"}}]]}],["$","$L1a",null,{"question":{"id":"HOLCfXPO99","slot":61,"body":"

Which log source should be used to filter QRadar audit events?

","answer":"To filter QRadar audit events, the appropriate log source to use is the SIM-Audit-log. This log source specifically pertains to security information management audit logs which are relevant for QRadar audit events.","exam_id":"c1000-140","o_id":"89863-exam-c1000-140-topic-1-question-61-discussion","o_answer_long":"

","o_answer_short":null,"o_sect":1,"o_slot":61,"is_published":true,"created_at":"$D2024-07-23T02:23:33.685Z","updated_at":"$D2024-07-30T09:29:15.470Z","last_comment_at":"$D2022-12-07T04:37:00.000Z","options":[{"id":"WmSm5i4KOH","o_is_correct":false,"slot":0,"body":"

Health Metrics-2

","is_correct":false,"question_id":"HOLCfXPO99","created_at":"$D2024-07-23T02:23:33.708Z","updated_at":"$D2024-07-30T10:04:50.972Z"},{"id":"9TC1GOPOyq","o_is_correct":false,"slot":1,"body":"

SIM Audit-2

","is_correct":false,"question_id":"HOLCfXPO99","created_at":"$D2024-07-23T02:23:33.708Z","updated_at":"$D2024-07-30T10:04:50.972Z"},{"id":"Xyebe94Tbq","o_is_correct":false,"slot":2,"body":"

Audit-log

","is_correct":false,"question_id":"HOLCfXPO99","created_at":"$D2024-07-23T02:23:33.708Z","updated_at":"$D2024-07-30T10:04:50.972Z"},{"id":"rLnq1D8jan","o_is_correct":true,"slot":3,"body":"

SIM-Audit-log

","is_correct":true,"question_id":"HOLCfXPO99","created_at":"$D2024-07-23T02:23:33.708Z","updated_at":"$D2024-07-30T10:04:50.972Z"}],"exam":{"code":"C1000-140","id":"c1000-140"}},"totalCorrect":1,"answers":[3],"answer":"To filter QRadar audit events, the appropriate log source to use is the SIM-Audit-log. This log source specifically pertains to security information management audit logs which are relevant for QRadar audit events.","isHTML":false}]]}],"$L1b"]}]}]