JCPenney interview question

How do you identify a attack in Web Security Analytics