You're investigating suspicious behavior linked to a user. Which key indicators should you examine in the User Search view to assess the threat context? (Choose two)

The correct answer is C. Number of hosts the user has accessed D. Number of detections associated with the user. You've hit your limit · resets 12:50am (America/New_York)

Threat Investigation and Search

Question

Options

ANumber of failed login attempts
BUser's IP subnet
CNumber of hosts the user has accessed
DNumber of detections associated with the user

How the community answered

(66 responses)

A
14% (9)
B
6% (4)
C
80% (53)

Explanation

You've hit your limit · resets 12:50am (America/New_York)

Topics

#User Search#threat context#detection count#host access history

Community Discussion

No community discussion yet for this question.

Full CCFR-201B Practice