Exam C1000-156 Topic 7 Question 37 Discussion

Actual exam question for IBM's C1000-156 exam
Question #: 37
Topic #: 7
A ORadar administrator is trying to tune a rule so that it cannot send an email more than 10 times in a 24-hour period. Which method can be used to accomplish this goal?

Suggested Answer: B Vote an answer

To ensure that a rule in IBM QRadar SIEM V7.5 does not send an email more than 10 times in a 24-hour period, the "response limiter" can be used. Here's how it works:
Response Limiter: This feature limits the number of times a rule action (such as sending an email) can be executed within a specified timeframe.
Configuration: Set the response limiter to a maximum of 10 actions in 24 hours.
Implementation: Apply the response limiter to the rule, ensuring that even if the rule conditions are met multiple times, the email will only be sent up to the specified limit.
Reference
IBM QRadar SIEM documentation on rule management and tuning includes detailed instructions on using the response limiter to control the frequency of rule actions.

by Elaine at Nov 25, 2025, 11:34 AM

Limited Time Offer

15%

Off

Get Premium C1000-156 Questions as Interactive Self Test Engine or PDF

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
Nick name: Submit Cancel
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
0
0
0
10