IBM Security QRadar SIEM V7.4.3 Administration — Question 36

In a multidomain and multitenant environment, how is event visibility provided to users?

Answer options

• A. An event is in a domain, a domain is attached to a tenant, and a tenant is referenced in the security profile of the user.
• B. An event is allocated to a tenant, a tenant is attached to a domain, and a domain is referenced in the security profile of the user.
• C. An event is allocated to a tenant, and a tenant is referenced in the security profile of the user.
• D. An event is in a domain, and a domain is referenced in the security profile of the user.

Correct answer: A

Explanation

The correct answer, A, indicates that for users to see events, those events must be linked to a domain, which in turn is connected to a tenant, and this tenant needs to be included in the user's security profile. Options B, C, and D do not fully encompass the necessary connections between events, domains, and tenants for complete visibility as described in the question.