Knowledge CheckPass mark 80%+40 XP

Module 3 Knowledge Check — Aggregating and Transforming

Pass mark 80%1 / 3

One source IP produced failed logins against 60 different accounts. Which search surfaces it best?

A.stats count by src (total failures)B.stats dc(user) as accounts by src | sort -accounts — distinct accounts per source is the spray signalC.dedup srcD.table src