Splunk Enterprise Security Certified Admin — Question 27

Where is detailed information about identities stored?

Answer options

• A. The Identity Investigator index.
• B. The Access Anomalies collection.
• C. The User Activity index.
• D. The Identity Lookup CSV file.

Correct answer: D

Explanation

The correct answer is D, as the Identity Lookup CSV file stores detailed information about identities. The other options, while related to identity management, do not specifically contain the comprehensive identity details found in the CSV file.