Final answer:
The correct answer is c) 30 minutes. Applications have to run for at least 30 minutes before traffic spike and drop alerts are raised. This time frame allows for sufficient data to be collected to analyze patterns and detect anomalies in the traffic flow.
Step-by-step explanation:
The correct answer is c) 30 minutes.
Applications have to run for at least 30 minutes before traffic spike and drop alerts are raised. This time frame allows for sufficient data to be collected to analyze patterns and detect anomalies in the traffic flow. By waiting for 30 minutes, the system can establish a baseline and identify any sudden increases or decreases in traffic that might indicate a problem.
For example, if an application starts experiencing a sudden spike in traffic well before the 30-minute mark, it might be due to a DDoS attack or other malicious activity. On the other hand, if there is a sudden drop in traffic after the 30-minute mark, it might indicate a server or network issue. By waiting for at least 30 minutes, the system can provide more accurate and reliable alerts for abnormal traffic patterns.