Referring to the exhibit, what is a reason for this behavior?

Exhibit

You are using ATP Cloud and notice that there is a host with a high number of ETI and C&C hits sourced from the same investigation and notice that some of the events have not been automatically mitigated.

Referring to the exhibit, what is a reason for this behavior?
A . The C&C events are false positives.
B . The infected host score is globally set bellow a threat level of 5.
C . The infected host score is globally set above a threat level of 5.
D . The ETI events are false positives.

View Answer

Answer: D