Which of the following would BEST help to ensure that suspicious network activity is identified?

An intrusion detection system (IDS) is a network security tool that monitors and analyzes network

traffic for signs of malicious or suspicious activity, such as unauthorized access, data exfiltration,

malware infection, or denial-of-service attack. An IDS can detect and alert the organization to

potential threats based on predefined rules or signatures, or based on anomalies or deviations from

normal network behavior. An IDS can also generate logs that record the details of the network events

and incidents, such as the source, destination, content, and context of the network traffic. By

analyzing the IDS logs, the organization can identify and validate the suspicious network activity, and

determine its scope, impact, and root cause. The organization can also use the IDS logs to support

the incident response and remediation process, and to improve the network security and resilience.

The other options are less effective ways to ensure that suspicious network activity is identified.

Analyzing server logs can provide some information about the network activity, but it may not be

sufficient or timely to detect and validate the suspicious or malicious activity, as server logs only

capture the events or activities that occur on the server, and not on the entire network. Using a third-

party monitoring provider can help to outsource the network monitoring and analysis function, but it

may not be the best option, as it may introduce additional risks, such as data privacy, vendor

reliability, or service quality issues. Coordinating events with appropriate agencies can help to share

information and resources with other organizations or authorities, such as law enforcement,

regulators, or industry peers, but it may not be the best option, as it may depend on the availability

andcooperation of theagencies, and it may not be feasible or desirable to disclose the network

activity to external parties. Reference = Monitoring for Suspicious Network Activity: Key Tips to

Secure Your Network 1