Knowledge CheckPass mark 80%+40 XP
Module 2 Knowledge Check — Searching and Filtering
Module 2 Knowledge Check — Searching and Filtering
Pass mark 80%1 / 3
Why prefer `sourcetype=auth result=failure` over the keyword `failed`?
Preview build: sign-in and grading run on the server. MFA is not enabled, and storage is in server memory so it does not survive a restart.
Why prefer `sourcetype=auth result=failure` over the keyword `failed`?