Verified Q&A Bank

Free Practice Question #16306

In a on-premises data center involving the EDR console and audit logs, Which log source is most useful to confirm whether a suspicious user authenticated through the IdP?

+1-0
MCQ
A
Printer toner report
B
Identity provider sign-in logs
C
Building floor plan
D
Marketing campaign calendar
CompTIA-SecurityPlusSY0-701practice-test-04domain-4-security-operations4.9-investigationlog-sourcedifficulty-1

Want to try a full mock exam?

Unlock the full timed mock test series for CompTIA-SecurityPlus to see detailed analytics and compete on the leaderboard.

Start Full Test Series