Implementing and Operating Cisco Security Core Technologies (SCOR) — Question 69

Which suspicious pattern enables the Cisco Tetration platform to learn the normal behavior of users?

Answer options

• A. file access from a different user
• B. user login suspicious behavior
• C. privilege escalation
• D. interesting file access

Correct answer: A

Explanation

The correct answer, A, indicates that when a file is accessed by a different user than expected, it serves as a key indicator for the Tetration platform to identify deviations from normal user behavior. The other options, while related to security concerns, do not specifically reflect patterns that help in establishing the baseline for user activity.