問題文
A team needs a rule to apply to production accounts but not to sandbox accounts. What is the appropriate way to arrange that?
選択肢
- Remove the sandbox accounts from the Connector so they are not read at all.
- Write two rules with opposite conditions and enable both of them, so that the sandbox accounts satisfy the second rule while the production accounts satisfy the first, and neither set of accounts is reported by both rules at once.
- Set the rule severity to the lowest value, which keeps the sandbox results out of sight.
- Narrow the scope at which the rule is applied, so that it is evaluated only within the intended part of the environment.