フリー問題

Datadog Cloud SIEM for AWS Fundamentals のフリー問題 4 / 20 問目

問題文

An engineer writes a selection rule that asks for records whose client address is known to be hostile, and it matches nothing at all. Which pairing explains why and names the kind of attribute the rule should use instead?

選択肢

  1. The rule matches nothing because selection runs at the upstream point in the documented sequence, so the rule should be rewritten around the verdict attributes the record already carries.
  2. The rule matches nothing because selection runs at the upstream point in the documented sequence, so the rule should be rewritten around the origin attributes the record already carries.
  3. The rule matches nothing because selection runs at the latest point in the documented sequence, so the rule should be rewritten around the origin attributes the record already carries.
  4. The rule matches nothing because selection runs at the latest point in the documented sequence, so the rule should be rewritten around the verdict attributes the record already carries.

解答・解説を確認するには

正解と解説の確認、回答の記録には無料登録が必要です。登録すると演習モードでフリー問題に回答し、正誤と解説をその場で確認できます。