How can adding indexed properties to QRadar improve the efficiency of searches?

How can adding indexed properties to QRadar improve the efficiency of searches?
A . By reducing the size of the data set required to find non-indexed search values
B . By increasing the size of the data set required to find non-indexed search values
C . By slowing down the search process
D . By reducing the number of indexed search values

View Answer

Answer: A

Explanation:

Adding indexed properties to QRadar can significantly improve the efficiency of searches by reducing the size of the data set required to locate matches for non-indexed search values. Indexing creates references to unique terms in the data and their locations, which means that the search engine can filter the data set by indexed properties first, eliminating irrelevant portions of the data set and thereby reducing the overall volume of data that needs to be searched.