Questão 92 — CompTIA SY0-701 CompTIA Security+ Certification Exam
Executives at a company are concerned about employees accessing systems and information about sensitive company projects unrelated to the employees' normal job duties. Which of the following enterprise security capabilities will the security team most likely deploy to detect that activity?
- A. UBA
- B. EDR
- C. NAC
- D. DLP
Resposta correta:
A
Explicação
Explanation: Correct answer: A. UBA User and Entity Behavior Analytics (UEBA) is the enterprise capability most likely to detect unauthorized access to sensitive information because: Behavioral Analysis:UEBA systems establish baselines of normal user behavior and detect deviations when G users access unusual resources Access Pattern Detection:The system identifies when users access sensitive data or projects unrelated to G their job duties Anomaly Detection:Machine learning identifies suspicious patterns such as accessing sensitive projects G without legitimate business reasons Real-Time Monitoring:UEBA provides continuous monitoring of user activities across systems and G applications Insider Threat Focus:UEBA is specifically designed to detect insider threats and inappropriate data access G by employees UEBA is the modern approach to detecting when employees access information beyond their authorized scope.
Quer todas as 907 questões por R$ 1,00?