XDR-ENGINEER · Question #39
A correlation rule is created to detect potential insider threats by correlating user login events from one dataset with file access events from another dataset. The rule must retain all user login ev
Sign in or unlock XDR-ENGINEER to reveal the answer and full explanation for question #39. The question stem and answer options stay visible for context.
Question
A correlation rule is created to detect potential insider threats by correlating user login events from one dataset with file access events from another dataset. The rule must retain all user login events, even if there are no matching file access events, to ensure no login activity is missed. text Copy dataset = x | join (dataset = y) Which type of join is required to maintain all records from dataset x, even if there are no matching events from dataset y?
Options
- AInner
- BLeft
- CRight
- DOuter
Unlock XDR-ENGINEER to see the answer
You've previewed enough free XDR-ENGINEER questions. Unlock XDR-ENGINEER for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.