Which of the following options are the possible reasons why a certain signature is not included after the IPS policy configuration is completed? (multiple choice)

In the big data intelligent security analysis platform, it is necessary to collect data from data sources, and then complete a series of actions such as data processing, detection and analysis, etc.
do. Which of the following options does not belong to the action that needs to be completed in the data processing part?

Which of the following is correct about the order of the file filtering technology process?
(1) Security policy application is permit
(2) Protocol decoding
(3) File Type Identification
(4) Application identification
(5) File Filtering

The cloud sandbox refers to deploying the sandbox to the cloud and providing tenants with remote detection services. The process includes:
1. Report suspicious files
2. Backtracking attacks
3. Firewall defense linkage
4. Cloud sandbox detection
Which of the following option is correct for the sorting of this process?

Cloud sandbox refers to deploying the sandbox in the cloud and providing remote detection services for tenants. The process includes:
1. Report suspicious files
2. Retrospective attack
3. Firewall linkage defense
4. Prosecution in the cloud sandbox
For the ordering of the process, which of the following options is correct?