A security administrator at Company XYZ is trying to develop a body of knowledge to enable heuristic and behavior based security event monitoring of activities on a geographically distributed…

Question

Options

• AModel the network in a series of VMs;
• BCompletely duplicate the network on virtual machines;
• CInstrument the operational network; simulate extra traffic on the network;
• DSchedule testing on operational systems when users are not present;

• A
  45% (23)
• B
  14% (7)
• C
  33% (17)
• D
  8% (4)

Explanation

Modeling the network in a series of VMs is the best approach for safely establishing a behavioral baseline. It lets you simulate normal traffic patterns and operating conditions in a controlled, isolated environment without putting production systems at risk. Once the model is validated, you can instrument the real network with confidence. Option B (fully duplicating the network in VMs) is prohibitively expensive and complex. Option C introduces simulated extra traffic onto the live operational network, which risks distorting the very baseline you're trying to capture and can impact production performance. Option D (testing when users aren't present) defeats the purpose - you need to capture normal user behavior, not an empty network.

No community discussion yet for this question.