IBM Integration Bus v10.0 Solution Developer — Question 7

An administrator needs to extract a property from an intrusion detection system (IDS) log. Using a regular expression, the administrator wants to extract a specific part of the log showing the matching `policy ID` of the IDS.
Which type of property must the administrator create?

Answer options

• A. Custom event property
• B. Custom flow property
• C. Custom asset property
• D. Normalized event property

Correct answer: D

Explanation

The correct answer is D, as a Normalized event property is specifically designed to extract and standardize data from logs, including the `policy ID` from an IDS log. The other options, such as Custom event, flow, and asset properties, do not specifically serve this purpose and are used for different types of data extraction or categorization.