Knowledge CheckPass mark 80%+40 XP

Module 2 Knowledge Check — Searching with KQL

Pass mark 80%1 / 3

Why prefer `event.outcome:failure` over the free-text search `failure`?

A.It matches only documents whose outcome field is failure, instead of the word appearing anywhereB.Free text is always more accurateC.There is no differenceD.event.outcome is not a real field