フリー問題

Datadog Cloud SIEM for AWS Fundamentals のフリー問題 9 / 20 問目

問題文

A custom rule should only consider sign-ins from addresses that the security team maintains on a list of known corporate egress points, and that list changes weekly. Which pairing names where the list should live and the operator that keeps only matching records?

選択肢

  1. The weekly list should live in the archived table the platform keeps outside the rule, and keeping only records present on it uses the negating operator the join editor offers automatically.
  2. The weekly list should live in the archived table the platform keeps outside the rule, and keeping only records present on it uses the including operator the join editor offers automatically.
  3. The weekly list should live in the lookup table the platform keeps outside the rule, and keeping only records present on it uses the negating operator the join editor offers automatically.
  4. The weekly list should live in the lookup table the platform keeps outside the rule, and keeping only records present on it uses the including operator the join editor offers automatically.

解答・解説を確認するには

正解と解説の確認、回答の記録には無料登録が必要です。登録すると演習モードでフリー問題に回答し、正誤と解説をその場で確認できます。