フリー問題

問題文

An analyst opens the detections area of the portal. Which description states what is listed there?

選択肢

1. The set of response actions that were carried out on each resource during the current shift, so that the incoming analyst can see what has already been contained and what remains outstanding before continuing the investigation.
2. Only the matches that the platform has already grouped into a situation worth acting on, so that the list never contains anything that can be left alone, which means the figure on that page moves in step with the count of open threats during the shift.
3. The raw records exactly as the cloud provider wrote them, before any rule has been applied to them, so the page grows at the rate the provider writes them and an analyst reads each line to decide what matters.
4. Individual matches produced when ingested activity satisfied the conditions of a Threat Detection Rule, each pointing at the rule, the resource, and the identity involved.