A.Use new app names each time content is exported.

B.Do not use the .spl extension when naming an export.

C.Always include existing and new content for each export.

D.Either use new app names or always include both existing and new content.

A.A user.

B.A device.

C.An asset.

D.An identity.

A.cim_modactions

B.modular_history

C.cim_adaptiveactions

D.modular_action_history

A.High risk threats.

B.Notable event domains displayed by risk score.

C.A display of the highest risk assets and identities.

D.Key indicators showing the highest probability correlation searches in the environment.

A.Recommended Actions show a textual description to an analyst, Adaptive Response Actions show them encoded.

B.Recommended Actions show a list of Adaptive Responses to an analyst, Adaptive Response Actions run them automatically.

C.Recommended Actions show a list of Adaptive Responses that have already been run, Adaptive Response Actions run them automatically.

D.Recommended Actions show a list of Adaptive Resposes to an analyst, Adaptive Response Actions run manually with analyst intervention.