MENU
Northern Trail Outfitters (NTO) believes a specific user account may have been compromised. NTO inactivated the user account and needs U perform a forensic analysis and identify signals that could Indicate a breach has occurred.
What should NTO's first step be in gathering signals that could indicate account compromise?
Suggested Answer: D
Get Premium Salesforce Certified Platform Identity and Access Management Architect (Plat-Arch-203) Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
28 comments · newest first
DE
Derrick
11 months ago
Not sure if just looking at login history is enough...
MA
Marylou
11 months ago
The Identity Provider Event Log has all the juicy details.
DO
Doyle
12 months ago
Surprised they didn't mention checking the audit trail first!
LO
Lorenza
12 months ago
I think reviewing the user record is more important first.
KA
Karan
1 year ago
Definitely start with the login history! That's key.
BA
Barney
1 year ago
I lean towards downloading the Login History first. It might help identify any unusual login patterns that could indicate a breach.
SE
Serina
1 year ago
I practiced a similar question, and I feel like evaluating the Identity Provider Event Log could give more insights into the user's activities.
TA
Tashia
1 year ago
I'm not entirely sure, but I remember something about the Setup Audit Trail being important for tracking user activities. Maybe that’s a good option too?
FI
Filiberto
1 year ago
I think the first step should be to review the user record and check the login history. That seems like a logical starting point.
CO
Coletta
1 year ago
Hmm, I'm a little confused on this one. I'm not sure if I should go with option A, B, C, or D. Maybe I'll just start with option A and see what that reveals. Gotta start somewhere, right?
GA
Galen
1 year ago
Ah, this is a good one. I'd say the first step is to download the Login History and evaluate the details of the user's logins. That should give me a clear picture of any suspicious activity that might have occurred. Option D is the way to go here.
SK
Skye
1 year ago
Okay, let's see here. I'm a bit unsure about this one. Should I go with option A and review the user record and transaction history? Or is option C, the Identity Provider Event Log, the better choice? I'll need to think this through carefully.
KE
Kenneth
1 year ago
Hmm, this seems like a pretty straightforward forensic analysis question. I think I'll go with option B - downloading the Setup Audit Trail and reviewing the recent user activities. That should give me a good overview of what's been happening with that account.
RE
Renea
1 year ago
This seems like a straightforward question about choosing the most appropriate debt financing option for Company P. I'll need to carefully consider the company's situation and requirements.
VA
Van
2 years ago
I think downloading the Setup Audit Trail and reviewing all recent activities performed by the user could also provide valuable information.
JA
Janine
2 years ago
I agree with Raina. That would be the best first step to gather signals of account compromise.
RA
Raina
2 years ago
I think NTO should review the User record and evaluate the login and transaction history.
CA
Caren
2 years ago
You know, I've seen some pretty wild stuff in my day, but this is just getting ridiculous. Whoever compromised this account must have been feeling a little 'identity crisis'!
EZ
Ezekiel
2 years ago
Option C looks promising. The Identity Provider Event Log could give us some juicy details on those shady activities.
CR
Cristy
2 years ago
C) Download the Identity Provider Event Log and evaluate the details of activities performed by the user.
MO
Mozell
2 years ago
B) Download the Setup Audit Trail and review all recent activities performed by the user.
JU
Justine
2 years ago
A) Review the User record and evaluate the login and transaction history.
TE
Tegan
2 years ago
I'd go with Option D. The login history is where the real clues are hiding, I bet.
OL
Olive
2 years ago
Option A seems like the obvious choice. I bet the login and transaction history will give us a good idea of what's been going on.
ER
Erinn
2 years ago
Let's go ahead and review the User record then.
WA
Wava
2 years ago
I agree, checking the login and transaction history will give us important information.
CH
Chery
2 years ago
Yeah, that sounds like a good first step to gather signals of account compromise.
GW
Gwen
2 years ago
I think we should review the User record and evaluate the login and transaction history.