Apple Interview Question

How to go about developing a baseline for anomaly detection