問題文
An engineer sets a detection to run every five minutes over the previous five minutes and must decide between the real time and the continuous scheduling option. The organization cannot afford to miss any window. Which choice fits, and what is the behavioral difference?
選択肢
- Continuous, because a detection on that setting is never skipped, whereas one on the real time setting is skipped when it cannot run at its scheduled moment and does not go back to fill the gap afterwards.
- Continuous, because that setting switches the detection to use the index time instead of the event time, which is the only way to avoid missing late-arriving events and that index time is what the scheduler then compares against.
- Either one, because the schedule window setting is what controls skipping; setting the schedule window to zero prevents skipping under both scheduling options in either case.
- Real time, because that setting keeps a search running permanently and therefore cannot miss a window, whereas the continuous setting only runs at the scheduled moments and leaves gaps between them, which is the difference that matters here.