212-82 Question #132: Real Exam Question with Answer & Explanation

Question

NetSafe Corp, recently conducted an overhaul of its entire network. This refresh means that the old baseline traffic signatures no longer apply. The security team needs to establish a new baseline that comprehensively captures both normal and suspicious activities. The goal is to ensure real-time detection and mitigation of threats without generating excessive false positives. Which approach should NetSafe Corp, adopt to effectively set up this baseline?

Options

• AContinuously collect data for a week and define the average traffic pattern as the baseline.
• BUtilize machine learning algorithms to analyze traffic for a month and generate a dynamic baseline.
• CAnalyze the last year's traffic logs and predict the baseline using historical data.
• DConduct a red team exercise and base the new baseline on the identified threats.