The Security Operation Team requested a report to show users who have logged in the last seven days. Which report in the Builtin Reports Library should you use?

The correct answer is D. Top User Logins. Top User Logins (D) is the correct choice because this report specifically tracks login activity over a recent time period, making it the right tool for identifying users who have authenticated within the last seven days. Active Users (A) shows users who are active in the system

Reporting and Auditing

Question

The Security Operation Team requested a report to show users who have logged in the last seven days. Which report in the Builtin Reports Library should you use?

Options

AActive Users
BMFA Summary
CLogins Map
DTop User Logins

How the community answered

(24 responses)

A
4% (1)
B
13% (3)
C
4% (1)
D
79% (19)

Explanation

Top User Logins (D) is the correct choice because this report specifically tracks login activity over a recent time period, making it the right tool for identifying users who have authenticated within the last seven days. Active Users (A) shows users who are active in the system but doesn't focus on login timestamps or recent login history. MFA Summary (B) is focused on multi-factor authentication enrollment and status, not login frequency or recency. Logins Map (C) provides a geographic visualization of where logins are occurring, which is useful for detecting anomalous locations but not for listing users by recent login date.

Memory tip: Think "Top User Logins = who logged in and when" - the word "Logins" is the key differentiator, and "Top" implies a ranked/recent activity list, which aligns with the 7-day lookback the SOC team needs.

Topics

#Built-in Reports#User Logins#Reporting#Audit

Community Discussion

No community discussion yet for this question.

Full ACCESS-DEF Practice