Examice

Exam C1000-140 All QuestionsBrowse all questions from this exam

Question 9

A QRadar deployment professional designs a multi-tenant environment where each tenant is permitted a quantity of events per second (EPS).

In a discussion with the service provider (who provides the security monitoring services to each tenant), how should the deployment professional describe the licensing options available?

Per-tenant EPS limits can be set, but any events over the EPS will be dropped from the pipeline; over-license buffering will not be used to handle EPS spikes.

Per-tenant EPS limits can be set if the tenants are defined by event collectors. Then over-license buffering can be used to handle EPS spikes.

If each domain and tenant is defined by log source groups, the EPS limit can be shared by the log source groups used for each tenant. Over-license buffering is defined at the event collector.

The domain sets EPS limits, so each tenant needs to have only one domain. This way, over-license buffering can be used to handle EPS spikes.

Correct Answer: B

Per-tenant EPS limits can be set if the tenants are defined by event collectors. Then over-license buffering can be used to handle EPS spikes. This explanation accurately reflects how a multi-tenant environment can manage EPS limits effectively by utilizing event collectors, which can also handle temporary spikes in EPS due to the ability to use over-license buffering.

Discussion

elior19940Option: B

I think the right answer is B: https://www.ibm.com/docs/en/qradar-on-cloud?topic=management-monitoring-license-usage

elior19940

Sorry, I guess it is A

ChandanaaOption: B

I think the answer is B