Which term identifies anomalies and monitors access activities?

Which term identifies anomalies and monitors access activities?

• A. Identity Analytics
• B. End Users
• C. Workflow Automation
• D. Access Administrators

Answer: (A)

Identity Analytics is the capability that identifies anomalies and monitors access activities. It analyzes identity and access data—such as who is logging in, when and where, what resources they access, and what permissions they hold—to detect unusual or risky patterns. This enables detection of potentially compromised accounts or insider threats and supports ongoing monitoring with risk scoring and alerts. The other options describe people, roles, or automation rather than the analytics function. End users are the subjects of monitoring, not the tool that identifies anomalies. Workflow automation focuses on streamlining processes, not security analytics. Access administrators manage permissions and access governance, not the analytics that flags unusual behavior.

Identity Analytics is the capability that identifies anomalies and monitors access activities. It analyzes identity and access data—such as who is logging in, when and where, what resources they access, and what permissions they hold—to detect unusual or risky patterns. This enables detection of potentially compromised accounts or insider threats and supports ongoing monitoring with risk scoring and alerts.

The other options describe people, roles, or automation rather than the analytics function. End users are the subjects of monitoring, not the tool that identifies anomalies. Workflow automation focuses on streamlining processes, not security analytics. Access administrators manage permissions and access governance, not the analytics that flags unusual behavior.