A.Recommended Actions show a textual description to an analyst, Adaptive Response Actions show them encoded.

B.Recommended Actions show a list of Adaptive Responses to an analyst, Adaptive Response Actions run them automatically.

C.Recommended Actions show a list of Adaptive Responses that have already been run, Adaptive Response Actions run them automatically.

D.Recommended Actions show a list of Adaptive Resposes to an analyst, Adaptive Response Actions run manually with analyst intervention.

A.A prefix of CIM_

B.A suffix of .spl

C.A prefix of TECH_

D.A prefix of Splunk_TA_

A.A risk score.

B.An IP address rating.

C.An event priority.

D.A source ranking.

A.OS: 64 bit, RAM: 32 MB, CPU: 16 cores

B.OS: 64 bit, RAM: 32 MB, CPU: 12 cores

C.OS: 64 bit, RAM: 12 MB, CPU: 16 cores

D.OS: 32 bit, RAM: 16 MB, CPU: 12 cores

A.Asset priority and threat weight.

B.Alert severity found by the correlation search.

C.Asset or identity risk and severity found by the correlation search.

D.Severity set by the correlation search and priority assigned to the associated asset or identity.