Users are reporting longer delays in authentication and in accessing network resources during certain time periods of the week. What kind of information should network engineers check to find out if this situation is part of a normal network behavior?

To determine whether the reported delays are part of normal network behavior, network engineers should check:

• The network performance baseline: A baseline consists of data that represents typical network performance during normal operational periods. By comparing current performance metrics to the baseline, engineers can determine if the delays are within normal ranges or indicative of a problem.

If the delays are outside the normal baseline, engineers might then consult:

• Syslog records and messages: These can provide insight into system events and errors that occur on network devices, which might contribute to the delays.
• Debug output and packet captures: These tools are useful for real-time troubleshooting and in-depth analysis of the traffic flow, but they might be too granular for determining normal behavior patterns unless specific issues have been identified that need detailed investigation.

Checking the baseline is generally the first step, as it gives an overview of expected performance against which actual performance can be measured. If anomalies are found, more detailed diagnostics like syslogs, debug outputs, and packet captures might be used to investigate further.