CompTIA SecurityX (CAS-005) CAS-005 — Question 147

A security analyst discovered requests associated with IP addresses known for both legitimate and bot-related traffic. Which of the following should the analyst use to determine whether the requests are malicious?