A QRadar deployment professional wants to integrate a dynamic data set like asset information so that QRadar can use the latest information in the new data set to correlate the rules and alerts.
How can the deployment professional achieve this?
A QRadar deployment professional wants to integrate a dynamic data set like asset information so that QRadar can use the latest information in the new data set to correlate the rules and alerts.
How can the deployment professional achieve this?
The correct way to integrate a dynamic data set like asset information into QRadar is to import the dynamic data in the reference set and use these reference sets in rules and building blocks. This allows QRadar to use the latest information in the data set to correlate the rules and alerts efficiently.
Answer Should be B
I think right answer is B https://www.ibm.com/docs/en/qradar-on-cloud?topic=examples-integrate-dynamic-data-from-external-sources