Eccouncil 312-39 Exam - Topic 4 Question 104 Discussion

Actual exam question for Eccouncil's 312-39 exam

Question #: 104
Topic #: 4

[All 312-39 Questions]

Which of the following formula is used to calculate the EPS of the organization?

AEPS = average number of correlated events / time in seconds

BEPS = number of normalized events / time in seconds

CEPS = number of security events / time in seconds

DEPS = number of correlated events / time in seconds

Show Suggested Answer

Suggested Answer: C

by Gracia at Apr 06, 2025, 08:07 PM

Limited Time Offer

25%

Off

Get Premium 312-39 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Veronika

4 months ago

I always thought it was about normalized events, so B could be a contender.

upvoted 0 times

...

Ruby

4 months ago

No way, it has to be C for security events!

upvoted 0 times

...

Wilford

4 months ago

I think it's D, right?

upvoted 0 times

...

Christene

4 months ago

Definitely D! That's the standard formula.

upvoted 0 times

...

Kenneth

4 months ago

Wait, is it really just about correlated events?

upvoted 0 times

...

Octavio

5 months ago

I have a vague memory of correlated events being important, so maybe option D is the right choice?

upvoted 0 times

...

Iesha

5 months ago

I feel like I might be mixing up the terms. Wasn't there something about normalized events in one of our practice sessions?

upvoted 0 times

...

Halina

5 months ago

I remember practicing a similar question, and I think it was about security events. Could it be option C?

upvoted 0 times

...

Christa

5 months ago

I think EPS stands for Events Per Second, but I'm not entirely sure which formula applies here.

upvoted 0 times

...

Macy

6 months ago

I'm feeling confident about this one. The formula for EPS is definitely number of correlated events divided by time in seconds.

upvoted 0 times

...

Yuette

6 months ago

Okay, I think I've got it. The key is that we're looking for the formula to calculate Events Per Second (EPS), not something else. Option D seems to be the right one.

upvoted 0 times

...

Lawanda

6 months ago

Ugh, I can never remember the difference between all these event-related formulas. Let me try to reason this out step-by-step.

upvoted 0 times

...

Margot

6 months ago

I'm pretty sure the correct formula is D, but I should double-check my notes to be sure.

upvoted 0 times

...

Shayne

6 months ago

Hmm, this looks like a tricky one. I'll need to think it through carefully.

upvoted 0 times

...

Annette

11 months ago

Option C is just too generic. Security events can be anything, but EPS is specifically about the rate of correlated events. D is the way to go, no doubt.

upvoted 0 times

...

Lashanda

11 months ago

I'm going with D. It's the classic EPS formula we learned in security class. The number of correlated events divided by the time elapsed is the way to go.

upvoted 0 times

Tijuana

10 months ago

Actually, B is the formula for EPS, number of normalized events divided by time.

upvoted 0 times

...

Ngoc

10 months ago

I think it's C, number of security events divided by time.

upvoted 0 times

...

Dudley

10 months ago

I agree, D is the correct formula for calculating EPS.

upvoted 0 times

...

Shayne

11 months ago

Haha, option A is clearly a joke! Correlated events have nothing to do with EPS, that's more like a formula for measuring the correlation coefficient. Get it together, people!

upvoted 0 times

Vallie

10 months ago

Erasmo: Yeah, that makes more sense. Option A is way off.

upvoted 0 times

...

Erasmo

10 months ago

User 2: I think the correct formula is option C, number of security events divided by time in seconds.

upvoted 0 times

...

Sharika

11 months ago

User 1: I agree, option A is definitely not the right formula for calculating EPS.

upvoted 0 times

...

Sunny

11 months ago

Option B seems more logical to me. Normalized events are the ones that have been processed and filtered, so they should be the basis for calculating EPS.

upvoted 0 times

Eulah

10 months ago

Yes, normalized events are the processed and filtered ones, so they should be used in the formula for EPS.

upvoted 0 times

...

Rossana

11 months ago

I agree, using the number of normalized events makes more sense for accurate EPS calculation.

upvoted 0 times

...

Meghan

11 months ago

I think option B is correct. Normalized events are more relevant for calculating EPS.

upvoted 0 times

...

Andrew

11 months ago

I think option D is the correct answer. The EPS (Events Per Second) measures the number of correlated events processed per second, which is the most relevant metric for security event analysis.

upvoted 0 times

...