What will happen to the data after 30 days?

There are 10 retention buckets in Qradar SIEM. The default is placed in the last line with retention policy of 30 days. Action is set to delete the data immediately after retention period has expired. Admin creates another policy on top of the default policy to keep firewall data for 10 days.

What will happen to the data after 30 days?
A . Firewall data will be erased after 30 days
B . Everything will be erased after 30 days
C . Everything will be erased after 10 days
D . Firewall data will be erased after 10 days

View Answer

Answer: B