CompTIA Security+ (SY0-701) — Question 340

Executives at a company are concerned about employees accessing systems and information about sensitive company projects unrelated to the employees’ normal job duties. Which of the following enterprise security capabilities will the security team most likely deploy to detect that activity?

Answer options

• A. UBA
• B. EDR
• C. NAC
• D. DLP

Correct answer: A

Explanation

UBA, or User Behavior Analytics, is designed to monitor user activities and detect anomalies that could indicate unauthorized access to sensitive information. EDR (Endpoint Detection and Response) focuses on endpoint threats, NAC (Network Access Control) manages device access to networks, and DLP (Data Loss Prevention) prevents data breaches but doesn't specifically monitor user behavior for anomalies.