IBM Security QRadar V7.3.1 Fundamental Administration — Question 5

Guardium reports are showing multiple records with client ip as 0.0.0.0. Users are unable to identify which client the connections came from. The Guardium administrator has identified that the databases are using encryption.
Which column can the administrator add that would help users to better identify the client?

Answer options

• A. Client OS
• B. Client MAC
• C. Access ID
• D. Analyzed Client IP

Correct answer: B

Explanation

The correct answer is B, Client MAC, because the MAC address is a unique identifier for devices on a network, allowing users to identify the specific client making the connection. The other options, while informative, do not provide the same level of unique identification for clients as the MAC address does.