Q97
Single choice
A security analyst must identify abnormal behavior on the server.
Which of the following does the analyst most likely need to do?