What feature in QRadar uses existing asset profile data so administrators can define unknown server types and assign them to a server definition in building blocks and in the network hierarchy?
What is the default number of notifications that the System Notification dashboard can display?
When using the Dynamic Search window on the Admin tab, which two (2) data sources are available?
What happens when you select "False Positive" from the right-click menu in the Log Activity tab?
Which type of rule should you use to test events or (lows for activities that are greater than or less than a specified range?