問題文
What distinguishes an indicator of attack from an indicator of compromise?
選択肢
- It describes the account that is now locked, while the other describes the session that was justified before.
- It describes the exposure that is still open, while the other describes the process that was applied later.
- It describes the control that is now missing, while the other describes the finding that was raised earlier.
- It describes the activity that is under way, while the other describes the residue that was left behind.