What module should an administrator use to identify anomalous user behavior such as large amounts of data being downloaded, too many files being shared, or logins from suspicious locations?
A) Detect
B) Protect
C) Investigate
D) Audit

Question

Quizplus · Accepted Answer

The "Detect" module is typically used to identify and alert on anomalous user behavior, such as unusual data downloads, excessive file sharing, or logins from suspicious locations.

What Module Should an Administrator Use to Identify Anomalous User