フリー問題

問題文

A team proposes to handle alert volume by working strictly in order of the severity each rule assigns. Which weakness does that ordering carry?

選択肢

1. The severity is copied when the case is escalated, so it cannot match the instance the next tier owns or the target held.
2. The severity is read when the alert is raised, so it cannot survive the export the platform runs or the state it fills.
3. The severity is checked when the case is closed, so it cannot change the report the control writes or the data it feeds.
4. The severity is fixed when the rule is written, so it cannot reflect the asset the alert names or the pattern it belongs to.