This baseline sets certain thresholds for specific errors or mistakes allowed and the amount of these
occurrences that can take place before it is considered suspicious?
A.
Checkpoint level
B.
Ceiling level
C.
Clipping level
D.
Threshold level
Explanation:
Organizations usually forgive a particular type, number, or pattern of violations, thus permitting a predetermined
number of user errors before gathering this data for analysis. An organization attempting to track all violations,
without sophisticated statistical computing ability, would be unable to manage the sheer quantity of such data.
To make a violation listing effective, a clipping level must be established.
The clipping level establishes a baseline for violation activities that may be normal user errors. Only after this
baseline is exceeded is a violation record produced. This solution is particularly effective for small- to mediumsized installations. Organizations with large-scale computing facilities often track all violations and use statistical
routines to cull out the minor infractions (e.g., forgetting a password or mistyping it several times).
If the number of violations being tracked becomes unmanageable, the first step in correcting the problems
should be to analyze why the condition has occurred. Do users understand how they are to interact with the
computer resource? Are the rules too difficult to follow? Violation tracking and analysis can be valuable tools in
assisting an organization to develop thorough but useable controls. Once these are in place and records are
produced that accurately reflect serious violations, tracking and analysis become the first line of defense. With
this procedure, intrusions are discovered before major damage occurs and sometimes early enough to catch
the perpetrator. In addition, business protection and preservation are strengthened.
Incorrect Answers:
A: Checkpoint level is not the correct term for the baseline described in the question.
B: Ceiling level is not the correct term for the baseline described in the question.
D: Threshold level is not the correct term for the baseline described in the question.