Which term identifies outlier activities in access logs?

• A. KPI
• B. Behavioral Analysis Tools
• C. Centralized Access Process
• D. Automated Access Review

Answer: (B)

Detecting unusual activity in access logs relies on analyzing how users typically behave. Behavioral analysis tools, often called UEBA, learn a baseline of normal login patterns—who, when, where, on which devices, and which resources are accessed—and continuously monitor for deviations. Outliers might be logins from unexpected locations, at odd times, from unfamiliar devices, or bursts of access to sensitive systems. Access logs provide data such as timestamps, IP addresses, geolocation, device IDs, resource paths, and actions; a behavioral analytics system uses this to flag anomalies for investigation. Other options describe metrics or governance processes rather than detecting abnormal activity: KPI tracks performance metrics; a centralized access process governs provisioning workflow; automated access review audits entitlements. Therefore, the term identifying outlier activities in access logs is behavioral analysis tools.