I'm not sure about this one, but I think option B could be the correct choice. A WebFilter log with action=dropped might generate an event with the status Contained.
I disagree, I believe option D is the right answer. An AppControl log with action=blocked seems more likely to generate an event with the status Contained.
Tonja
2 months agoAretha
1 months agoGalen
1 months agoTresa
2 months agoEmelda
2 months agoDelisa
26 days agoGlen
29 days agoTiffiny
1 months agoKattie
1 months agoDenise
2 months agoCarolann
3 months agoSamira
1 months agoInocencia
1 months agoLeslie
1 months agoGerman
2 months agoMy
2 months agoLino
2 months agoBernardo
3 months agoMalcom
3 months agoLevi
3 months agoMalcom
3 months ago