Northern Trail Outfitters (NTO) believes a specific user account may have been compromised. NTO inactivated the user account and needs U perform a forensic analysis and identify signals that could Indicate a breach has occurred.
What should NTO's first step be in gathering signals that could indicate account compromise?

Question

Northern Trail Outfitters (NTO) believes a specific user account may have been compromised. NTO inactivated the user account and needs U perform a forensic analysis and identify signals that could Indicate a breach has occurred.

What should NTO's first step be in gathering signals that could indicate account compromise?

Re na · Accepted Answer

Download the Login History and evaluate the details of logins performed by the user.

Re na · Answer

Review the User record and evaluate the login and transaction history.

Re na · Answer

Download the Setup Audit Trail and review all recent activities performed by the user.

Re na · Answer

Download the Identity Provider Event Log and evaluate the details of activities performed by the user.

Question list

List of questions

Question 1

(0)

Question 2

(0)

Question 3

(0)

Question 4

(0)

Question 5

(0)

Question 6

(0)

Question 7

(0)

Question 8

(0)

Question 9

(0)

Question 10

(0)

Related questions

Question 243 - Certified Identity and Access Management Architect discussion

Suggested answer: D

0 comments