Your corporate security policy requires that a user performing attacks must have limited network access and activities until an administrator can investigate. In the admin GUI, which sensor event policy action must you configure in "Configuration" "Sensors" "Sensor Event Policies" [rule name] to accomplish this?

Question

Your corporate security policy requires that a user performing attacks must have limited network access and activities until an administrator can investigate. In the admin GUI, which sensor event policy action must you configure in "Configuration" > "Sensors" > "Sensor Event Policies" > [rule name] to accomplish this?

Accepted Answer

B. Replace user's role

Answer

A. Ignore

Answer

C. Terminate user session

Answer

D. Disable user account

Your corporate security policy requires that a user performing attacks must have limited network access and activities until an administrator can investigate. In the admin GUI, which sensor event…

Question

Options

How the community answered

Community Discussion