When the behavior of an internal user has deviated from the norm of other users that work in the same department. Is this a suitable baseline for this use case?

You want to create a use case to get alerts when the behavior of an internal user has deviated from the norm of other users that work in the same department. Is this a suitable baseline for this use case? (Peer baseline based on the LDAP department from Active Directory.)
A. Yes
B. No

Download Printable PDF. VALID exam to help you PASS.