Eccouncil 212-82 Exam - Topic 5 Question 52 Discussion

Actual exam question for Eccouncil's 212-82 exam

Question #: 52
Topic #: 5

NetSafe Corp, recently conducted an overhaul of its entire network. This refresh means that the old baseline traffic signatures no longer apply. The security team needs to establish a new baseline that comprehensively captures both normal and suspicious activities. The goal is to ensure real-time detection and mitigation of threats without generating excessive false positives. Which approach should NetSafe Corp, adopt to effectively set up this baseline?

AContinuously collect data for a week and define the average traffic pattern as the baseline.

BUtilize machine learning algorithms to analyze traffic for a month and generate a dynamic baseline.

CAnalyze the last year's traffic logs and predict the baseline using historical data.

DConduct a red team exercise and base the new baseline on the identified threats.

Show Suggested Answer

Suggested Answer: B

Dynamic Baseline Establishment:

Machine learning algorithms can analyze vast amounts of network traffic data over an extended period, such as a month, to understand normal and abnormal patterns dynamically.

Real-Time Detection and Mitigation:

By leveraging machine learning, the system can continuously learn and adapt to new traffic patterns, reducing false positives and ensuring accurate real-time threat detection and mitigation.

Reduction of False Positives:

A machine learning-based approach can distinguish between benign anomalies and actual threats by considering context, historical data, and behavioral patterns, thereby minimizing false positives.

Handling Evolving Threats:

The dynamic nature of machine learning allows the baseline to evolve as new types of traffic and threats emerge, ensuring that the security system remains effective against both known and unknown threats.

Using machine learning to establish a dynamic baseline is an effective strategy for NetSafe Corp to maintain robust network security and respond to threats promptly.

by Reynalda at May 02, 2025, 03:13 PM

Limited Time Offer

25%

Off

Get Premium 212-82 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Mona

5 months ago

Totally agree with B! Dynamic baselines are the way to go.

upvoted 0 times

...

Coral

5 months ago

C seems risky; past data might not reflect current threats.

upvoted 0 times

...

Alaine

6 months ago

I think B is the best option. Machine learning can adapt to changes.

upvoted 0 times

...

Gerald

6 months ago

A week of data might not be enough to capture everything.

upvoted 0 times

...

Misty

6 months ago

Wait, can we really trust machine learning to get it right?

upvoted 0 times

...

Armanda

6 months ago

Conducting a red team exercise sounds interesting, but I wonder if it would provide a comprehensive baseline or just focus on specific threats.

upvoted 0 times

...

Milly

6 months ago

Analyzing last year's logs seems risky since network behavior can change quickly; I feel like it might not reflect current threats accurately.

upvoted 0 times

...

Carey

7 months ago

I think using machine learning for a month could help adapt to changes in traffic patterns, but it might take longer to implement.

upvoted 0 times

...

Paz

7 months ago

I remember we discussed the importance of real-time detection, but I'm not sure if a week is enough to capture all normal activities.

upvoted 0 times

...

Portia

7 months ago

I'm a bit confused on this one. I'm not sure which approach would be the most effective in ensuring real-time detection and mitigation of threats without generating excessive false positives.

upvoted 0 times

...

Carmen

7 months ago

Conducting a red team exercise and basing the new baseline on the identified threats seems like a good way to ensure that the baseline is comprehensive and captures both normal and suspicious activities.

upvoted 0 times

...

Dominga

7 months ago

Analyzing the last year's traffic logs and predicting the baseline using historical data could work, but I'm worried that it might not capture the changes in the network from the recent overhaul.

upvoted 0 times

...

Breana

8 months ago

Hmm, I'm not sure about that. Collecting data for a week and defining the average traffic pattern as the baseline seems like a simpler and more straightforward approach to me.

upvoted 0 times

...

Carey

8 months ago

I think the best approach here is to use machine learning to analyze the traffic for a month and generate a dynamic baseline. That way, the baseline can adapt to changes in the network over time.

upvoted 0 times

...

Elsa

11 months ago

Option C sounds like a lot of work, but hey, no pain, no gain, right? Historical data is the way to go!

upvoted 0 times

Rory

10 months ago

C) Analyze the last year's traffic logs and predict the baseline using historical data.

upvoted 0 times

...

Barney

11 months ago

A) Continuously collect data for a week and define the average traffic pattern as the baseline.

upvoted 0 times

...

Louvenia

11 months ago

Option B all the way! Let the algorithms do the heavy lifting and give us a baseline that's as smart as our team.

upvoted 0 times

...

Jolanda

11 months ago

Option A is way too simplistic. We need a more robust and long-term solution than just a week's worth of data.

upvoted 0 times

Desmond

10 months ago

True, but option D could also be valuable to base the baseline on real threats.

upvoted 0 times

...

Carey

10 months ago

But wouldn't option C provide a more comprehensive view based on historical data?

upvoted 0 times

...

Jolene

10 months ago

I think option B could be a good choice, using machine learning for a dynamic baseline.

upvoted 0 times

...

Bobbye

10 months ago

I agree, option A seems too short-sighted.

upvoted 0 times

...

Margurite

12 months ago

I think option D is the way to go, conducting a red team exercise can uncover vulnerabilities we might miss otherwise.

upvoted 0 times

...

Gail

12 months ago

Option D is the way to go! Simulating real-world threats will give us a much more comprehensive baseline.

upvoted 0 times

Heike

11 months ago

Continuously collecting data for a week and defining the average traffic pattern as the baseline seems like a practical approach as well.

upvoted 0 times

...

Cheryl

11 months ago

I think utilizing machine learning algorithms to analyze traffic for a month and generate a dynamic baseline could also be effective.

upvoted 0 times

...

Ilene

11 months ago

Option D is the way to go! Simulating real-world threats will give us a much more comprehensive baseline.

upvoted 0 times

...

Bernadine

12 months ago

I prefer option A, collecting data for a week seems more reliable to me.

upvoted 0 times

...

Juan

1 year ago

I agree with Vallie, using machine learning algorithms can help adapt to changing threats.

upvoted 0 times

...

Vallie

1 year ago

I think option B sounds like a good idea.

upvoted 0 times

...

Viva

1 year ago

I'd go with option C. Analyzing historical data is a tried and tested approach to set a reliable baseline.

upvoted 0 times

...

Marguerita

1 year ago

Option B sounds good, machine learning can really help us establish a dynamic baseline that adapts to changing traffic patterns.

upvoted 0 times

Galen

11 months ago

That's true, a dynamic baseline generated through machine learning can help us stay ahead of evolving threats.

upvoted 0 times

...

King

11 months ago

I agree, using machine learning algorithms to analyze traffic over a month can provide a more accurate baseline.

upvoted 0 times

...

Cherelle

12 months ago

Option B sounds good, machine learning can really help us establish a dynamic baseline that adapts to changing traffic patterns.

upvoted 0 times

...