What does the DSSE Rule do?

QRadar collects information from numerous log sources and other agents. Sometimes these agents stop reporting to QRadar for a variety of reasons. There is a default rule in QRadar to help identify these cases called the Device Stopped Sending Events (DSSE) Rule.

What does the DSSE Rule do?
A . It checks for log sources which are reporting that they have not had any communication in a certain amount of time.
B . It checks for Rules which have fired due to an absence of Events.
C . It runs when there is an absence of Events.
D . It listens for log sources that send out regular health events and triggers the Rule when encountered

View Answer

Answer: B