IBM Security QRadar SIEM V7.4.3 Administration — Question 59

A QRadar deployment uses multiple domains to provide data separation between different departments in the organization.
When the tenants and users are configured, which constraints are enforced?

Answer options

• A. A tenant can contain multiple domains; each domain may be in multiple tenants.
• B. A tenant can contain only one domain; each tenant can only have a single user.
• C. A tenant can contain multiple domains; each domain may only be in a single tenant.
• D. A tenant can contain only one domain; each tenant can have multiple users.

Correct answer: C

Explanation

The correct answer is C because a tenant in QRadar can have multiple domains, but each domain is restricted to being part of only one tenant. Options A and D incorrectly suggest that domains can exist in multiple tenants or that a tenant can have multiple domains with one domain, respectively. Option B incorrectly states that a tenant can have only a single user, which is not a limitation in QRadar's architecture.