Executives at a company are concerned about employees accessing systems and information about sensitive company projects unrelated to the employees' normal job duties. Which of the following…

Question

Options

• AUBA
• BEDR
• CNAC
• DDLP

• A
  83% (20)
• B
  4% (1)
• C
  8% (2)
• D
  4% (1)

Explanation

UBA (User Behavior Analytics) is correct because it monitors and analyzes patterns in user activity to detect anomalies - like an employee suddenly accessing systems or projects outside their normal role. When behavior deviates from an established baseline, UBA flags it for investigation, making it purpose-built for exactly this insider threat scenario.

EDR (Endpoint Detection & Response) focuses on detecting and responding to malware and threats on devices, not on monitoring what data or systems users access across the enterprise. NAC (Network Access Control) controls whether a device is allowed onto the network based on policy compliance (patch level, certificates, etc.), but doesn't analyze user behavior after they're connected. DLP (Data Loss Prevention) detects sensitive data leaving the organization (e.g., being emailed or uploaded externally), not unauthorized internal access to projects a user shouldn't be viewing.

Memory tip: Think of UBA as a "behavioral surveillance camera" - it watches what users do over time and sounds the alarm when someone's actions don't match their normal pattern. If the question mentions employees, insiders, or behavior/activity monitoring, UBA is almost always the answer.

No community discussion yet for this question.