IBM QRadar SIEM V7.5 Administration — Question 7

What are some of the supported custom property expression types in QRadar?

Answer options

• A. Regex, RDBMS, LEEF
• B. RDBMS, JSON, HTML
• C. Regex, JSON, HTML
• D. Regex, JSON, LEEF

Correct answer: D

Explanation

The correct answer is D because QRadar supports Regex, JSON, and LEEF as custom property expression types. Options A, B, and C include either incorrect types or combinations that do not fully represent the supported expressions in QRadar.