The Remote Access Graph in Visibility Reports displays:

Question

Options

• Aa bar chart where a bar represents a daily count of remote connections
• Ba geographical chart showing the geo-location of remote IP address
• Ca graph showing connections between hosts and users
• Da pie chart showing a count per remote logon type

• A
  2% (1)
• B
  2% (1)
• C
  89% (39)
• D
  7% (3)

Explanation

Option C is correct because the Remote Access Graph is a connection graph (node-link diagram) that visualizes relationships between hosts and the users who remotely access them, making it easy to spot unusual access patterns or lateral movement. Option A is wrong because bar charts showing daily counts are a different report type (typically a timeline/trend view, not the Remote Access Graph). Option B is incorrect because geo-location mapping of IP addresses is a separate geographic visualization feature, not what this graph displays. Option D is wrong because pie charts breaking down logon types (e.g., RDP, VPN) are categorical summaries, not connection graphs.

Memory tip: Think "Remote Access Graph = Graph theory" - graphs have nodes (hosts, users) and edges (connections between them). Any time you see "graph" in a security visibility report, picture a web of dots and lines showing who connected to what, not charts or maps.

No community discussion yet for this question.