While auditing your cloud environment, you need to identify the last time a specific user changed their password. Which of the following actions should you take in CrowdStrike Identity Analyzer to…

Question

Options

• AReview the "Access Permissions" tab for the user to find the password change timestamp.
• BNavigate to the user's activity logs and filter by "Authentication Events."
• CUse the "Password Change Insights" feature in the Identity Analyzer dashboard.
• DQuery the cloud provider's API directly for password change events.

• A
  4% (1)
• B
  4% (1)
• C
  93% (25)

Explanation

Option A: The "Access Permissions" tab focuses on roles, policies, and entitlements. It does not store password change history, making this option incorrect. Option B: Authentication events show login attempts and session data but do not track password changes. This approach would not yield the desired information. Option C: The "Password Change Insights" feature in CrowdStrike Identity Analyzer provides a centralized and user-friendly interface to track password change events. It is specifically designed for auditing and identifying such activity efficiently without relying on external tools or manual log Option D: While querying the cloud provider's API might work, it is time-consuming and requires advanced knowledge of the API. CrowdStrike Identity Analyzer already consolidates this information, making this step unnecessary.

No community discussion yet for this question.