Based on the threat hunting query shown in the exhibit which of the following is true?

exams NSE5_EDR-5.0 V1 NSE5_EDR-5.0 exam 0 Comments

Refer to the exhibit.

Based on the threat hunting query shown in the exhibit which of the following is true?
A . RDP connections will be blocked and classified as suspicious
B. A security event will be triggered when the device attempts a RDP connection
C. This query is included in other organizations
D. The query will only check for network category

Answer: B