IBM Security QRadar SIEM V7.5 Analysis C1000-162 Question # 30 Topic 4 Discussion

IBM Security QRadar SIEM V7.5 Analysis C1000-162 Question # 30 Topic 4 Discussion

C1000-162 Exam Topic 4 Question 30 Discussion:
Question #: 30
Topic #: 4

Which flow fields should be used to determine how long a session has been active on a network?


A.

Start time and end time


B.

Start time and storage time


C.

Start time and last packet time


D.

Last packet time and storage time


Get Premium C1000-162 Questions

Contribute your Thoughts:


Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.