Companies can set predefined thresholds for the number of certain types of errors that will be allowed before the activity is considered suspicious. The threshold is a baseline for violation activities that may be normal for a user to commit before alarms are raised. This baseline is referred to as a clipping level.
The following are incorrect answers:
Clipping levels enable a security administrator to customize the audit trail to record only those violations which are deemed to be security relevant. This is not the best answer, you would not record ONLY security relevant violations, all violations would be recorded as well as all actions performed by authorized users which may not trigger a violation. This could allow you to indentify abnormal activities or fraud after the fact.
Clipping levels enable the security administrator to customize the audit trail to record only actions for users with access to user accounts with a privileged status. It could record all security violations whether the user is a normal user or a privileged user.
Clipping levels enable a security administrator to view all reductions in security levels which have been made to user accounts which have incurred violations. The keyword "ALL" makes this question wrong. It may detect SOME but not all of violations. For example, application level attacks may not be detected.
Reference(s) used for this question:
Harris, Shon (2012-10-18). CISSP All-in-One Exam Guide, 6th Edition (p. 1239). McGraw-
Hill. Kindle Edition.
and
TIPTON, Hal, (ISC)2, Introduction to the CISSP Exam presentation.

This is the usual term to describe the destination for a TCP/UDP packet.
"Dedicated service" is incorrect. This is an "almost right sounding" term meant to confuse the
unwary.
"Delayed service" is incorrect. This is a nonsense term to confuse you.
"Distributed service" is incorrect. While network services can certainly be distributed, the usual
term is "desired service" or "destination service."
References:
CBK, p. 464
AIO3, pp. 482 - 484

The CPU, storage devices and peripherals each have specialized roles in the
security archecture. The CPU, or microprocessor, is the brains behind a computer system and
performs calculations as it solves problemes and performs system tasks. Storage devices provide
both long- and short-term stoarge of information that the CPU has either processed or may
process. Peripherals (scanners, printers, modems, etc) are devices that either input datra or
receive the data output by the CPU.
The motherboard is the main circuit board of a microcomputer and contains the connectors for
attaching additional boards. Typically, the motherboard contains the CPU, BIOS, memory, mass
storage interfaces, serial and parallel ports, expansion slots, and all the controllers required to
control standard peripheral devices.
Reference(s) used for this question:
TIPTON, Harold F., The Official (ISC)2 Guide to the CISSP CBK (2007), page 308.