300-445 Question 59
Select 3An organization is deploying a network assurance system to monitor application performance and detect deviations from normal behavior. As part of the implementation, they need to establish a metric baseline. Which of the following steps should be included when setting a metric baseline?
- A
Collect data over a representative time period to account for normal variations in traffic patterns.
- B
Use static thresholds for all metrics without considering historical data trends.
- C
Analyze historical performance data to identify normal operating ranges.
- D
Exclude data collected during known network outages or unusual events.
- E
Set baselines based on the highest observed values to avoid false positives.
Show answer and explanation
Correct answers: A, C, D
Explanation
Setting a metric baseline involves collecting accurate and representative data over a period of time, analyzing historical trends, and excluding abnormal events to ensure the baseline truly reflects normal network behavior. This allows the network assurance system to detect deviations effectively without generating excessive false positives or missing important anomalies.
- A. Correct.
Collecting data over a representative time period ensures that the baseline reflects normal traffic variations, such as peak and off-peak hours.
- B. Incorrect.
Using static thresholds without considering historical data trends is inaccurate and can lead to false alerts, as it ignores the network's unique behavior.
- C. Correct.
Analyzing historical performance data is crucial to accurately determining the normal operating ranges for metrics, which are essential for anomaly detection.
- D. Correct.
Excluding data from unusual events, like outages, is necessary to avoid skewing the baseline with abnormal values that do not represent typical conditions.
- E. Incorrect.
Setting baselines based on the highest observed values is not a best practice because it can desensitize the system to legitimate performance issues and anomalies.