The Brute Force Access Behavior Detected Correlation Search Is Enabled

question 43

Multiple Choice

The Brute Force Access Behavior Detected correlation search is enabled, and is generating many false positives. Assuming the input data has already been validated. How can the correlation search be made less sensitive?

• A) Edit the search and modify the notable event status field to make the notable events less urgent.
• B) Edit the search, look for where or xswhere statements, and after the threshold value being compared to make it less common match.
• C) Edit the search, look for where or xswhere statements, and alter the threshold value being compared to make it a more common match.
• D) Modify the urgency table for this correlation search and add a new severity level to make notable events from this search less urgent.

---

Definitions:

Debit Memo

A document issued by a purchaser to a seller to adjust or correct a previously issued invoice.

Adjusted Cash Balance

The cash amount shown in the books after adjustments have been made for checks, deposits in transit, and other items.

September Bank Reconciliation

The process of matching and comparing figures from the accounting records against those presented on the September bank statement to ensure consistency and accuracy in the financial records.

Cash Receipts Journal

A financial journal that records all cash inflows or receipts of a business, including sales cash and account receivables collections.