Juniper
JN0-636 · Question #6
You are using ATP Cloud and notice that there is a host with a high number of ETI and C&C hits sourced from the same investigation and notice that some of the events have not been automatically…
The correct answer is D. The ETI events are false positives. See the full explanation below for the reasoning.
Question
You are using ATP Cloud and notice that there is a host with a high number of ETI and C&C hits sourced from the same investigation and notice that some of the events have not been automatically mitigated. Referring to the exhibit, what is a reason for this behavior?
Options
- AThe C&C events are false positives.
- BThe infected host score is globally set bellow a threat level of 5.
- CThe infected host score is globally set above a threat level of 5.
- DThe ETI events are false positives.
How the community answered
(41 responses)- A10% (4)
- B2% (1)
- C7% (3)
- D80% (33)
Community Discussion
No community discussion yet for this question.