A security analyst is monitoring logs from the organization's SIEM and identifies logs related to one of their salespeople: Which of the following is being displayed in the logs?

The correct answer is A. Impossible travel. The logs show the same employee account accessing services from geographically distant locations (Atlanta and Beijing) within a short time frame, which is not physically possible, this is known as impossible travel.

Submitted by naveen.iyer· Mar 6, 2026Security Operations

Question

A security analyst is monitoring logs from the organization's SIEM and identifies logs related to one of their salespeople:

Which of the following is being displayed in the logs?

Exhibit

Options

AImpossible travel
BSMTP replay
CDirectory traversal
DCross-site request forgery

How the community answered

(19 responses)

A
84% (16)
B
5% (1)
D
11% (2)

Explanation

The logs show the same employee account accessing services from geographically distant locations (Atlanta and Beijing) within a short time frame, which is not physically possible, this is known as impossible travel.

Community Discussion

No community discussion yet for this question.

Full SY0-701 Practice