IBM C1000-162 Practice Questions - IBM Certified Analyst - Security QRadar SIEM V7.5 (C1000-162) Exam

In QRadar AQL, which clause restricts a query to events from the last 24 hours without specifying explicit timestamps?

WHERE starttime >= NOW() - 86400 LAST 24 HOURS SINCE YESTERDAY FILTER starttime = LAST_DAY

Correct Answer:

LAST 24 HOURS

Access more questions from this quiz

Continue to IBM C1000-162 Practice Questions - IBM Certified Analyst - Security QRadar SIEM V7.5 (C1000-162) Exam for more practice questions and the full quiz experience.

Access More Questions