Câu 4: PPAN01: Certified Threat Protection Analyst

What is the first action a security analyst should take when beginning to review and prioritize alerts from Targeted Attack Protection (TAP)?

1. A. Use filtering options on the TAP Threats page to organize and prioritize threat alerts. — đáp án hiện tại
2. B. Assess claims of false positives by analyzing forensic details and threat indicators.
3. C. Open and examine the contents of an email using the associated .eml file.
4. D. Investigate false negatives by identifying root causes in source policy configurations.