Skip to content

Threats, Vulnerabilities, and Mitigations · Objective 2.4

Applied

The same account authenticates to the VPN from Lisbon and, four minutes later, from Singapore. The user is on a train in Lisbon and does not hold a second phone. What should this alert be called?

Analyze indicators of malicious activity

Choices

Pick an answer. You’ll see if it’s right. The longer explanation is what a plan opens.

Why

Nearby items

28 items in the public index.