問題文
A security manager wants a single number that shows how much of the organization's outbound traffic is actually being examined for threats. Which measurement answers that question?
選択肢
- The number of rules in the policy, because each rule stands for one inspected class of traffic, so a longer policy means a larger share of the traffic is examined.
- The processor utilization of the firewalls, because inspection is the most expensive task the device performs and higher utilization therefore means a larger share is examined.
- The number of threat events blocked during the last month, because a higher count means more of the traffic is being examined and therefore more of it is protected.
- The share of allowed sessions that matched a rule carrying inspection profiles, compared with the total volume of allowed sessions.