An Employee Who Often Travels Abroad Logs in from a First-Seen

question 5

Multiple Choice

An employee who often travels abroad logs in from a first-seen country during non-working hours. The SIEM tool generates an alert that the user is forwarding an increased amount of emails to an external mail domain and then logs out. The investigation concludes that the external domain belongs to a competitor. Which two behaviors triggered UEBA? (Choose two.)

• A) domain belongs to a competitor
• B) log in during non-working hours
• C) email forwarding to an external domain
• D) log in from a first-seen country
• E) increased number of sent mails

---

Definitions:

Draft

A preliminary version of a piece of writing or document that is open for discussion, modification, or approval.

Instrument Value

The actual worth or significance of a financial document, like a stock or bond, in transactions.

Maker

The party in a financial transaction who creates or signs a promissory note, thereby agreeing to pay the note's value to a specified party.

Drawer

The person who writes or signs a bill of exchange, such as a check, thus creating a financial obligation.