IBM Security QRadar V7.3.1 Fundamental Administration — Question 4

A Guardium administrator is setting up a Collector schedule to export data to an Aggregator and Archive its data to an Archive storage unit for additional data safety.
Given this scenario, which is true regarding the purge schedule?

Answer options

• A. The Archive and the Export have independent purge schedules but should not be run at the same time.
• B. The Guardium unit would run the Export and Archive before any purge, so you would only see the last purge run each day.
• C. It would not be possible to configure both on a Collector, the Aggregator should do the archiving and only export from the Collector.
• D. Any time that Data Export and Data Archive are both configured, the purge age must be greater than both the age at which to export and the age at which to

Correct answer: D

Explanation

The correct answer, D, is accurate because it ensures that the data is retained long enough for both exporting and archiving before any purging occurs. Option A is incorrect as it suggests that the schedules are dependent, which is not the case. Option B misrepresents the visibility of purges, and Option C incorrectly states that both functions cannot be configured on the Collector.