Question: Detection capabilities of Host-based ID systems are limited by the incompleteness of which of thefollowing?
A. Audit log capabilities
B. Event capture capabilities
C. Event triage capabilities
D. Audit notification capabilities

Download pdf (with explanations) edition of this exam.