A security analyst, Ann, states that she believes Internet facing file transfer servers are being attacked. Which
of the following is evidence that would aid Ann in making a case to management that action needs to be takento safeguard these servers?

A.
Provide a report of all the IP addresses that are connecting to the systems and their locations

B.
Establish alerts at a certain threshold to notify the analyst of high activity

C.
Provide a report showing the file transfer logs of the servers

D.
Compare the current activity to the baseline of normal activity