問題文
Detection that compares current activity against a profile built by watching for a while raises a record when a legitimate task runs. How does that happen?
選択肢
- The task runs so often that it took place many times while the profile was being built, so the profile has a shape for it and its arrival counts as a wide departure from what was learned
- The task runs so seldom that it never took place while the profile was being built, so the profile has no shape for it and its arrival counts as a wide departure from what was learned
- The task runs on a host that was added after the profile was built, so the profile has no shape for that host and any arrival from it counts as a wide departure
- The task runs at a fixed hour that had been excluded from the profile on purpose, so the profile holds no shape for that hour and any arrival within it counts as a wide departure from the rest