CompTIA Network+ (N10-009) — Question 162

A network administrator needs to improve network monitoring. Which of the following should the administrator do first?

Answer options

• A. Establish baseline metrics.
• B. Implement a SIEM.
• C. Perform regular packet captures.
• D. Conduct availability monitoring.

Correct answer: A

Explanation

Establishing baseline metrics is crucial as it provides a reference point for normal network behavior, allowing the administrator to identify anomalies. Without this baseline, the effectiveness of other monitoring techniques, such as SIEM or packet captures, would be diminished, as there would be no clear standard for comparison. The other options may enhance monitoring, but they are less effective if baseline metrics are not first established.