Based on the threat hunting query shown in the exhibit which of the following is true?

Refer to the exhibit.

Based on the threat hunting query shown in the exhibit which of the following is true?
A . RDP connections will be blocked and classified as suspicious
B. A security event will be triggered when the device attempts a RDP connection
C. This query is included in other organizations
D. The query will only check for network category

Answer: B