A company experiences a breach. The investigation reveals that the threat actor used a zero-day vulnerability to gain access and move laterally. Which of the following would best improve the…

The correct answer is D. UBA. UBA builds baselines of normal user and entity activity (logins, data access patterns, movement between hosts) and flags deviations - the kind of anomalous lateral movement a zero‐day–driven intruder generates. Because it’s behavior-based rather than signature-based, it can…

Submitted by jordan8· Mar 6, 2026Security Operations

Question

A company experiences a breach. The investigation reveals that the threat actor used a zero-day vulnerability to gain access and move laterally. Which of the following would best improve the company’s security posture and minimize the time to detect this type of incident?

Options

ANAC
BIDS
CDLP
DUBA

How the community answered

(40 responses)

A
8% (3)
B
5% (2)
C
23% (9)
D
65% (26)

Explanation

UBA builds baselines of normal user and entity activity (logins, data access patterns, movement between hosts) and flags deviations - the kind of anomalous lateral movement a zero‐day–driven intruder generates. Because it’s behavior-based rather than signature-based, it can surface unseen exploits faster and shrink detection time for novel attacks.

Community Discussion

No community discussion yet for this question.

Full SY0-701 Practice