You are a cloud administrator for a company using CrowdStrike's Cloud Infrastructure Entitlement Manager (CIEM) to enhance identity security in the cloud. You want to identify users who have been…

Question

Options

• ARun the "Inactive Users Report" within the CIEM dashboard and filter users by the "Last Activity"
• BSearch for inactive users by using CIEM's "High-Risk Permissions" filter.
• CRely solely on CrowdStrike's AI recommendations to flag inactive users automatically.
• DManually cross-reference activity logs from CIEM with logs from your Identity and Access

• A
  90% (43)
• B
  2% (1)
• C
  2% (1)
• D
  6% (3)

Explanation

Option A: CIEM provides a built-in "Inactive Users Report" that simplifies the process of identifying inactive users based on the "Last Activity" timestamp. This approach is efficient and ensures that you are leveraging CIEM's automated analysis capabilities, which are designed for accurate and timely reporting of inactivity. Filtering by "Last Activity" provides the most reliable data without requiring additional manual effort. Option B: The "High-Risk Permissions" filter in CIEM is designed to identify users with excessive or unnecessary permissions, not to track activity. While these filters are useful for identifying potential security risks, they do not address inactivity directly. Option C: CrowdStrike's AI recommendations can assist in identifying potential risks but are not designed to automatically flag inactivity comprehensively. AI insights complement manual review or built-in tools like the "Inactive Users Report" but are not a standalone solution. Option D: While possible, this method is time-consuming and prone to human error. CIEM already integrates with IAM providers to automate the identification of inactive users. Relying on manual cross-referencing undermines CIEM's automation capabilities and increases the chances

No community discussion yet for this question.