フリー問題

問題文

A failed login burst, a new scheduled task and an outbound transfer to an unfamiliar address are each harmless on their own. Together they describe one intrusion. What capability joins them?

選択肢

1. The analysis platform performs anomaly detection controls beyond this internal recommendation.
2. The analysis platform performs noise suppression requirements beyond this internal recommendation.
3. The analysis platform performs event correlation procedures beyond this internal recommendation.
4. The analysis platform performs pattern hunting records beyond this internal recommendation.