フリー問題

問題文

An organization receives a list of indicators from a report about a recent campaign. What is the most useful thing it can do with that list?

選択肢

1. Search its own records for those artifacts to find out whether the campaign has already touched the estate and, if so, how far it reached.
2. Use the list to decide which vendor to buy from, since the number of artifacts in a report indicates which product would have stopped the campaign.
3. Publish the list to all employees so that they can watch for those artifacts themselves and report any of them that appear on the machines they use.
4. Add every artifact to a permanent blocking list and treat the matter as closed, because a campaign whose artifacts are all blocked can no longer proceed against the organization by any route that the attacker might choose to use next.