Refer to the exhibits.
How many events will be added to the incident created after running this playbook?
Refer to the exhibits.
How many events will be added to the incident created after running this playbook?
Based on the given exhibits, the filter in the playbook runs a query to match all conditions: Severity == Medium, Event Type == IPS, and Tag == Intrusion. From the Event Status list, there are ten entries that meet these criteria.
D is correct
The events you need to count are according from the match criteria "Medium, IPS and Intrusion"
Match all conditions: Intrusion + IPS + Medium: 10
D is correct
D is correct.