within the last 24 hours? How should the administrator complete this task in File Analytics?

An administer is determining the most recent operation a user performed on the share cifs1

within the last 24 hours? How should the administrator complete this task in File Analytics?
A . In the Anomalies section, view the anomaly rule created for the user with an interval of 24 hours.
B . In the Audit Trails section, search for the cifs1 share and view the actions on the share over the past 24hour range
C . In the Audit Trails section, search for the user and view their last operations.
D . In the Anomalies section, select Users exceed an operation count threshold an input the 24hour range for share cifs1

Answer: D