QuestionQ12
Events, forensics, and threat huntingRefer to the exhibit.
Based on the exhibit, which statement regarding this threat-hunting query is true?
- A RDP connections will be automatically blocked and classified as suspicious.
- B A security incident will be generated whenever the device attempts an RDP connection.
- C The query is limited to detecting network activity and does not inspect process behavior.
- D The query is configured as a global hunting rule and is automatically visible across all organizations.
Community Discussion