CyberArk Defender – Access — Question 42

You want to find all events related to the user with the login ID of "ivan.helen@acme".
Which filter do you enter into the UBA portal data explorer?

Answer options

• A. user_id = 'ivan.helen@acme'
• B. user_name = 'ivan.helen@acme'
• C. event_user = 'ivan.helen@acme'
• D. entity_name = 'ivan.helen@acme'

Correct answer: B

Explanation

The correct answer is B because the user_name filter specifically targets the username associated with events. The other options, while similar, refer to different identifiers that do not directly correlate with the user's login ID in this context.