SC-401 Practice Question 3657
Exam: SC-401
Domain: Manage risks, alerts, and activities
Difficulty: medium
You want to detect when an employee downloads files from SharePoint during atypical weekend hours and immediately renames them with different extensions. Which Insider Risk Management indicator tracks this?
Answer Options
A
Anomalous file download and file renaming activity indicators
B
Device configuration profile for Wi-Fi
C
Password Hash Synchronization logs
D
Service health notification preferences
Correct Answer
A: Anomalous file download and file renaming activity indicators
Explanation
File activity indicators for anomalous downloads and renaming activities evaluate file changes and volume spikes outside normal working hours.