Refer to the exhibit. Which statement about the rule filters events shown in the exhibit is true?

Question

Exhibit

Options

• AThe rule filters events with an event type that equals Domain Account Locked and a reporting IP
• BThe rule filters events with an event type that belong to the Domain Account Locked CMDB group
• CThe rule filters events with an event type that belong to the Domain Account Locked CMDB group
• DThe rule filters events with an event type that belong to the Domain Account Locked CMDB group

• B
  9% (2)
• C
  87% (20)
• D
  4% (1)

Explanation

From the Filters section in the exhibit, we see: 1. Event Type IN EventTypes: Domain Account Locked This means the rule will match events where the event type is classified under the Domain Account Locked category. 2. Reporting IP IN Applications: Domain Controller This means the rule is filtering for events where the reporting IP is classified under the Domain Controller applications group. 3. Logical Operator: AND The filters are combined using AND, meaning both conditions must be met for an event to match. Since both conditions must be true, the rule is effectively filtering events where: The event type belongs to the Domain Account Locked CMDB group The reporting IP belongs to the Domain Controller applications group

No community discussion yet for this question.