I'm not sure about this one, but I think option B could be the correct choice. A WebFilter log with action=dropped might generate an event with the status Contained.
I disagree, I believe option D is the right answer. An AppControl log with action=blocked seems more likely to generate an event with the status Contained.
Tonja
9 months agoAretha
8 months agoGalen
8 months agoTresa
8 months agoEmelda
9 months agoDelisa
8 months agoGlen
8 months agoTiffiny
8 months agoKattie
8 months agoDenise
9 months agoCarolann
9 months agoSamira
8 months agoInocencia
8 months agoLeslie
8 months agoGerman
9 months agoMy
9 months agoLino
9 months agoBernardo
9 months agoMalcom
10 months agoLevi
10 months agoMalcom
10 months ago