Refer to the exhibit. Which field in the Sguil application window indicates the priority of an event or set of correlated events?
- ST
- AlertID
- Pr
- CNT
Explanation: The Sguil application window has several fields available that give information about an event. The ST field gives the status of an event that includes a color-coded priority from light yellow to red to indicate four levels of priority.
Exam with this question: Checkpoint Exam: Analyzing Security Data Group Exam
Exam with this question: CyberOps Associate (Version 1.0) - CyberOps Associate 1.0 Practice Final exam
Why is the answer not Pr?
Please login or Register to submit your answer
Why is the answer not Pr?