exam questions

Exam 200-201 All Questions

View all questions & answers for the 200-201 exam

Exam 200-201 topic 1 question 381 discussion

Actual exam question from Cisco's 200-201
Question #: 381
Topic #: 1
[All 200-201 Questions]

An engineer must create a SIEM rule to test events and traffic for spikes and changes that occur in regular patterns to detect irregularities. Which rules achieve the desired results?

  • A. anomaly
  • B. behavioral
  • C. threshold
  • D. availability
Show Suggested Answer Hide Answer
Suggested Answer: B 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
ImGonnaPassIt
2 weeks, 1 day ago
Selected Answer: A
Agree. Anomaly is the answer and 'spikes' is the keyword.
upvoted 1 times
...
3000bd6
2 months ago
Selected Answer: A
It's anomaly key word is spikes
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago