Question 1050
At Willowbrook Transit, an engineer must detect anomalous device behavior from a baseline of normal traffic. What action meets this technical need?
Explanation
Correct Answer
Anomaly detection identifies departures from learned normal patterns for investigation. This is the control that implements the specified requirement.
Incorrect Answers
Generative models produce natural-language explanations based on supplied events and evidence. That is not sufficient here: Anomaly detection identifies departures from learned normal patterns for investigation.
Automation applies repeatable tested configuration rather than relying on individually typed changes. That is not sufficient here: Anomaly detection identifies departures from learned normal patterns for investigation.
POST commonly submits resource creation or actions with a payload. That is not sufficient here: Anomaly detection identifies departures from learned normal patterns for investigation.