IBM Exam C1000-162 Topic 1 Question 13 Discussion

Actual exam question for IBM's C1000-162 exam

Question #: 13
Topic #: 1

AQRadar analyst can check the rule coverage of MITRE ATT&CK tactics and techniques by using Use Case Manager.

In the Use Case Manager app, how can a QRadar analyst check the offenses triggered and mapped to MITRE ATT&CK framework?

ABy navigating to 'CRE Report'

BFrom Offenses tab

CBy clicking on 'Tuning Home'

DBy navigating to 'Detected in timeframe'

Show Suggested Answer

Suggested Answer: B

by Freeman at May 28, 2024, 11:21 AM

Limited Time Offer

25%

Off

Contribute your Thoughts:

Submit Cancel

5 days ago

The 'Offenses' tab is the way to go here. That's where we can see the offenses mapped to the MITRE ATT&CK framework.

upvoted 0 times

...

13 days ago

I'm not sure, but I think it makes sense to check the offenses from the Offenses tab.

upvoted 0 times

...

14 days ago

I agree with Kimi, because that's where all the offenses are listed.

upvoted 0 times

...

18 days ago

I think the answer is B) From Offenses tab.

upvoted 0 times

...