フリー問題

問題文

The first version of a workflow sends a message for every detection in the estate, and the channel becomes unusable. What is the correct fix?

選択肢

1. Change the trigger so that it fires less often, by pointing it at a different kind of event that happens more rarely than a detection does.
2. Add conditions so that the workflow only proceeds for the cases that warrant a message.
3. Remove the action so that the workflow keeps a record of the events without notifying anyone, leaving the channel quiet.
4. Disable detections on the noisiest hosts, which removes the events that drive it.