問題文
The summary view at a retailer shows that refused sessions doubled last week. The analyst has to establish which part of the estate accounts for it. What is the appropriate next step?
選択肢
- Distribute the configuration again, so that every device is running the same rules before the increase is attributed to any of them.
- Extend the retention period, so that the week in question can still be read once the attribution has been worked out from another source.
- Look at the same period through the view organized by rule, so the increase can be attributed before individual records are read.
- Read the individual records for the whole week, because the attribution can only be established from the entries themselves and the views that summarize them are not precise enough to support a conclusion.