Câu 12: NSE6_EDR_AD-7.0: Fortinet NSE 6 - FortiEDR 7.0 Administrator

Refer to the exhibit. Based on the exhibit, which statement about this treat hunting query is true?

1. A. RDP connections will be automatically blocked and classified as suspicious.
2. B. A security incident will be generated whenever the device attempts an RDP connection. — đáp án hiện tại
3. C. The query is limited to detecting network activity and does not inspect process behavior.
4. D. The query is configured as a global hunting rule and is automatically visible across all organizations.