Exam4Training

What does it mean when a custom rule is partially matched in QRadar?

What does it mean when a custom rule is partially matched in QRadar?
A . The rule is not fully enabled.
B . The AND NOT operator is set incorrectly in the first test.
C . All the tests in the rule were fully matched.
D . Not all the the tests in the rule were fully matched.

Answer: D

Exit mobile version