IBM Exam C1000-162 Topic 1 Question 13 Discussion

Actual exam question for IBM's C1000-162 exam

Question #: 13
Topic #: 1

AQRadar analyst can check the rule coverage of MITRE ATT&CK tactics and techniques by using Use Case Manager.

In the Use Case Manager app, how can a QRadar analyst check the offenses triggered and mapped to MITRE ATT&CK framework?

ABy navigating to 'CRE Report'

BFrom Offenses tab

CBy clicking on 'Tuning Home'

DBy navigating to 'Detected in timeframe'

Show Suggested Answer

Suggested Answer: B

by Freeman at May 28, 2024, 11:21 AM

Limited Time Offer

25%

Off

Contribute your Thoughts:

Submit Cancel

1 months ago

The 'Offenses' tab is the way to go, but I'd be curious to know if there's a way to make a sandwich while I'm at it. Multitasking, you know?

upvoted 0 times

...

1 months ago

The 'Offenses' tab, of course! What were the other options even thinking? This is QRadar 101.

upvoted 0 times

...

1 months ago

Navigating to the 'Offenses' tab is the correct answer, no doubt. Gotta love when the solution is right in front of you.

upvoted 0 times

7 days ago

User 2: Same here, it's the easiest way to see everything in one place.

upvoted 0 times

...

25 days ago

User 1: I always go to the Offenses tab to check the offenses triggered and mapped to MITRE ATT&CK framework.

upvoted 0 times

...

2 months ago

I think the answer is B) From Offenses tab.

upvoted 0 times

...