View all questions & answers for the Implementing and Operating Cisco Security Core Technologies v1.1 (350-701 SCOR v1.1) Exam Materials exam

Implementing and Operating Cisco Security Core Technologies v1.1 (350-701 SCOR v1.1) Exam Materials - Question #476 Discussion

Comment Image Comment Image Comment Image

Which suspicious pattern enables the Cisco Secure Workload platform to detect deviations in the normal behavior of users? (Choose one answer)

  • A. user login suspicious behavior
  • B. interesting file access
  • C. file access from an anonymous user
  • D. privilege escalation
Correct Answer: A

Brave-Dump Community Votes

Answer: A (1 vote) 100%

Community Explanations & Comments (1)

Anonymous User 3 months ago
Selected: A
user login suspicious behavior (Option A): This engine specifically baselines and tracks a user's normal login habits (such as standard login methods, locations, and failure frequencies). It is explicitly designed to identify deviations in user behavior profile traits


interesting file access (Option B): This engine does not baseline user identity deviations. Instead, it is configured by an administrator to watch a specific list of highly sensitive or critical files (e.g., system configuration or password files) and flags an alert whenever any process or entity touches them.