How does a threat progression get identified in Identity SOC?

Which two features describe the monitoring capabilities of Oracle Security Monitoring and Analytics (SMA) Cloud Service? (Choose two.)

How do you configure Oracle Identity Cloud Service so that user accounts will never be locked because of consecutive, unsuccessful login attempts?

Due to rapid change in technology and regulatory overhead, companies arechallenged to maintain and update the rules as per the industry standard benchmarks.
Which Oracle service will help in maintaining the industry standard benchmarks?

A customer use case requires the second Factor Email during Oracle Identity Cloud Service Authentication process for a group of users only. The security administrator, signed in Oracle Identity Cloud Service console, enabled the email factor, edited the default sign-on policy and added a new sign-on rule. The new sign-on rule included the group name in the member of these groups conditions and prompt for additional factor every time. The administrator saved both the rule and the policy.
After executing this configuration, why does the email factor NOT appear to users from that group?