nerdexam
IBM

C2150-400 · Question #55

A mail server typically communicates with 50 hosts per second in the middle of the night and then suddenly starts communicating with 1.000 hosts a second. The administrator wants to get an email…

The correct answer is C. Threshold Rule. See the full explanation below for the reasoning.

Question

A mail server typically communicates with 50 hosts per second in the middle of the night and then suddenly starts communicating with 1.000 hosts a second. The administrator wants to get an email alert whenever this situation is being observed. Which type of rule should an administrator create to monitor this situation?

Options

  • AFlow Rule
  • BAnomaly Rule
  • CThreshold Rule
  • DBehavioral Rule

How the community answered

(40 responses)
  • A
    8% (3)
  • B
    3% (1)
  • C
    73% (29)
  • D
    18% (7)

Community Discussion

No community discussion yet for this question.

Full C2150-400 Practice