The Unusual protocol activity (Internal) network anomaly is generating too many alerts. An administrator has been asked to tune it to the option that will generate the least number of events without disabling it entirely.
Which strategy should the administrator use to achieve this goal?

Question

The Unusual protocol activity (Internal) network anomaly is generating too many alerts. An administrator has been asked to tune it to the option that will generate the least number of events without disabling it entirely.

Which strategy should the administrator use to achieve this goal?

Med Amine Aloui · Accepted Answer

Set the Alert Disposition to Conservative

Med Amine Aloui · Answer

Disable the policy

Med Amine Aloui · Answer

Change the Training Threshold to Low

Med Amine Aloui · Answer

Set Alert Disposition to Aggressive

Question list

List of questions

Question 1

(0)

Question 2

(0)

Question 3

(0)

Question 4

(0)

Question 5

(0)

Question 6

(0)

Question 7

(0)

Question 8

(0)

Question 9

(0)

Question 10

(0)

Related questions

Question 41 - PCCSE discussion

Suggested answer: B

0 comments