An Administrator working within IBM Security QRadar SIEM V7.2.8 has created a network hierarchy that includes the following groups and subgroups:Office #1 Group- Miscellaneous - Sales - Marketing #2 Group- Miscellaneous - Sales - Marketing new subgroup is added to Office #1 having a CIDR of . Offenses are being triggered and during the investigation, it is noticed the rule should not fire if traffic is L2L. The offense is being triggered on traffic from to .Is this rule using the network hierarchy correctly?
A. This rule is parsing the network hierarchy correctly, as the address is not contained in a group, and therefore is remote.
B. This rule isn't parsing the network hierarchy correctly, as the network hierarchy contains both subnets, but is viewing traffic between groups to be remote instead of local.
C. This rule is parsing the network hierarchy correctly, as the offices are both remotely geo-located, and connecting over the Internet, it is remote traffic.
D. This rule isn't parsing the network hierarchy correctly, as the network hierarchy contains the CIDR for10.10.4.17 and , therefore being L2L traffic.
