問題文
A team is building the profile of normal network activity. Which approach produces a usable baseline?
選択肢
- Using the vendor default thresholds without measurement.
- Measuring over a period that includes the business cycles, and keeping separate figures for different times and groups.
- Using the busiest single day as the reference.
- Taking a single measurement during the quietest hour of the week and using it as the reference for all periods, because a value measured when there is no activity is free of the noise that ordinary use introduces and therefore gives the cleanest possible reference point.