A security analyst, Ann, states that she believes Internet facing file transfer servers are being attacked. Which
of the following is evidence that would aid Ann in making a case to management that action needs to be taken
to safeguard these servers?
A.
Provide a report of all the IP addresses that are connecting to the systems and their locations
B.
Establish alerts at a certain threshold to notify the analyst of high activity
C.
Provide a report showing the file transfer logs of the servers
D.
Compare the current activity to the baseline of normal activity