Knowledge CheckPass mark 80%+200 XP

Module 01 Assessment — Part A: Knowledge

Pass mark 80%1 / 6

An alert fires for 'process launched from a temporary directory'. The process is a software updater, it runs at the same time weekly, and every workstation in the estate shows the same behaviour. What is the correct verdict?

A.True positive — temporary directories are always suspiciousB.False positive — the behaviour is baselined across the estate and scheduledC.Escalate immediately without further checksD.Close it without recording a reason