問題文
A team has to work out which hosts in the estate are carrying a piece of malicious code. Two families of method are set out for it. What separates them?
選択肢
- One reads the records that the products keep and the other reads the records that the hosts keep, so the split between them follows the place the records are held in.
- One is carried out by the analysts and the other by the users at the keyboards, so the split between them follows who does the work.
- One looks for evidence that an infection happened recently and gains accuracy as that evidence ages, while the other settles which hosts were carrying it before the records were gathered.
- One looks for evidence that an infection happened recently and loses accuracy as that evidence ages, while the other settles which hosts are carrying it at the moment and so lets a step be taken straight away.