View all questions & answers for the Implementing and Operating Cisco Security Core Technologies v1.1 (350-701 SCOR v1.1) Exam Materials exam


Implementing and Operating Cisco Security Core Technologies v1.1 (350-701 SCOR v1.1) Exam Materials-Question 476 Discussion
Comment Image Comment Image Comment Image

Which suspicious pattern enables the Cisco Secure Workload platform to detect deviations in the normal behavior of users? (Choose one answer)

  • A. user login suspicious behavior
  • B. interesting file access
  • C. file access from an anonymous user
  • D. privilege escalation
Correct Answer: A

Brave-Dump Clients Votes

A 100%

Comments



Anonymous User 2026-07-03 11:40:13

Selected Answers: A


user login suspicious behavior (Option A): This engine specifically baselines and tracks a user's normal login habits (such as standard login methods, locations, and failure frequencies). It is explicitly designed to identify deviations in user behavior profile traits


interesting file access (Option B): This engine does not baseline user identity deviations. Instead, it is configured by an administrator to watch a specific list of highly sensitive or critical files (e.g., system configuration or password files) and flags an alert whenever any process or entity touches them.