App Control System Health email alerts for excessive agent backlog are occurring hourly. This is overwhelming the analysts, and they would like to reduce the notifications.
How can the analyst reduce the unneeded alerts?

Review the following query:
path:c:\program\ files\ \(x86\)\microsoft
How would this query input term be interpreted?

Refer to the exhibit:

Which statement is true in regards to communication between the sensor and server?

Review the following search:
childproc_name:"rundll32.exe" AND -digsig_result:"Signed" AND path:c:\windows\* What is this search looking for?

Refer to the exhibit:

Which two logic statements correctly explain filtering within the UI? (Choose two.)