SY0-701 · Question #312
Which of the following is the first step to take when creating an anomaly detection process?
The correct answer is B. Building a baseline. The first step in creating an anomaly detection process is building a baseline of normal behavior within the system. This baseline serves as a reference point to identify deviations or anomalies that could indicate a security incident. By understanding what normal activity…
Question
Which of the following is the first step to take when creating an anomaly detection process?
Options
- ASelecting events
- BBuilding a baseline
- CSelecting logging options
- DCreating an event log
How the community answered
(25 responses)- B92% (23)
- C4% (1)
- D4% (1)
Explanation
The first step in creating an anomaly detection process is building a baseline of normal behavior within the system. This baseline serves as a reference point to identify deviations or anomalies that could indicate a security incident. By understanding what normal activity looks like, security teams can more effectively detect and respond to suspicious behavior.
Community Discussion
No community discussion yet for this question.