CompTIA CASP+ (CAS-003) — Question 291

The Chief Information Officer (CISO) is concerned that certain systems administrators will privileged access may be reading other users' emails. Review of a tool's output shows the administrators have used web mail to log into other users' inboxes.
Which of the following tools would show this type of output?

Answer options

• A. Log analysis tool
• B. Password cracker
• C. Command-line tool
• D. File integrity monitoring tool

Correct answer: A

Explanation

The correct answer is A, as a log analysis tool can track and report on user login activities, including access to web mail. Options B and C do not provide insights into user activity or email access, while D focuses on monitoring changes to files rather than tracking user behavior.