Which statement is true about the Device Trajectory feature?
A. It shows where the endpoint devices have moved in your environment by displaying each IP address that a device has had over time.
B. A “plus” sign on the File Trajectory map indicates that you can execute the file inside FireAMP.
C. In the File Trajectory map, you can view the parent process for a file by selecting the infected Real 11
Cisco 500-275 Exam
system.
D. It shows hosts that display Indications of Compromise.