CompTIA
SY0-701 · Question #575
A security analyst wants to better understand the behavior of users and devices in order to gain visibility into potential malicious activities. The analyst needs a control to detect when actions devi
Sign in or unlock SY0-701 to reveal the answer and full explanation for question #575. The question stem and answer options stay visible for context.
Submitted by valeria.br· Mar 6, 2026Security operations
Question
A security analyst wants to better understand the behavior of users and devices in order to gain visibility into potential malicious activities. The analyst needs a control to detect when actions deviate from a common baseline. Which of the following should the analyst use?
Options
- AIntrusion prevention system
- BSandbox
- CEndpoint detection and response
- DAntivirus
Unlock SY0-701 to see the answer
You've previewed enough free SY0-701 questions. Unlock SY0-701 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#Endpoint Detection and Response#Behavioral Analysis#Anomaly Detection#Threat Detection