問題文
A responder asks whether containment can be applied to a host that has not connected for two days. What should the administrator say?
選択肢
- The instruction cannot be issued at all, because the console refuses actions against hosts whose sensors have not reported recently and the host has to be brought online first.
- The instruction takes effect immediately, because containment is enforced by the network rather than by the sensor.
- The instruction can be issued, but it only takes effect when the host next connects.
- The host is already effectively contained, because it is not communicating with anything else at the moment.