A QRadar deployment professional needs to add a managed host to help reduce the load on the QRadar Console.
The managed host should have local storage and also use the QRadar Custom Rule Engine.
Which managed host does the deployment professional add?
The correct managed host to add in this scenario is the Event Processor. An Event Processor is designed to handle and process increased event flows, thereby reducing the load on the QRadar Console. It can store events locally and utilizes the QRadar Custom Rule Engine (CRE) to process these events efficiently.
D is correct