IBM Security QRadar SIEM V7.4.3 Administration — Question 50

A QRadar deployment professional wants to integrate a dynamic data set like asset information so that QRadar can use the latest information in the new data set to correlate the rules and alerts.
How can the deployment professional achieve this?

Answer options

• A. Use the QRadar Search to search each item in the list of imported data set.
• B. Import the dynamic data in the reference set and use these reference sets in rules and building blocks.
• C. Use the Threat Intelligence app.
• D. Use the UCM app.

Correct answer: A

Explanation

The correct answer is B because importing dynamic data into a reference set allows QRadar to use that information for correlation in rules and alerts. Option A is incorrect as it suggests searching each item individually, which is not an efficient method for integration. Options C and D are not relevant to the integration of dynamic datasets for correlation purposes.