Question 1
Choose 1
A company with 15,000 employees is using Salesforce and would like to take the necessary steps to highlight or curb fraudulent activity.
Which tool should be used to track login data, such as the average number of logins, who logged in more than the average number of times and who logged in during non-business hours?
Which tool should be used to track login data, such as the average number of logins, who logged in more than the average number of times and who logged in during non-business hours?
Correct answer:
B. Login Forensics
Explanation:
To detect fraudulent activity like unusual login frequency or off-hours access, Salesforce provides Event Monitoring which includes LoginForensics (part of Login Analytics). LoginForensics analyzes login patterns, calculates averages, and surfaces anomalous behavior such as users exceeding average login counts or logging in outside business hours.
Correct Option:
B. Login Forensics
Login Forensics is a feature within Salesforce Event Monitoring (Login Analytics). It uses machine learning and statistical analysis to identify anomalies in login behavior. It can show average logins per user, flag users logging in during non-business hours, and highlight users who exceed the average. This is specifically designed for security monitoring and fraud detection.
Incorrect Options:
A. Login Inspector
There is no standard Salesforce feature called "Login Inspector." This may be confused with Login Forensics or a third-party tool. It is not a valid native tool for tracking average logins or off-hours activity.
C. Login Report
Standard login reports (from Login History) can show raw login events but cannot calculate averages, compare users against averages, or automatically highlight anomalies. Login reports require manual analysis and do not provide the behavioral analytics needed for fraud detection.
D. Login History
Login History is a standard setup audit trail showing raw login events (timestamp, user, IP, status). It does not compute averages, flag off-hours logins automatically, or identify anomalous patterns. While useful for basic auditing, it lacks the advanced analytics required for this use case.
Reference:
Salesforce Help Article: "Monitor Login Activity with Event Monitoring – Login Forensics"
Trailhead: "Event Monitoring for Security" – Unit on "Login Forensics"
Salesforce Architect Documentation: "Login Forensics Metrics (Average Logins, Off-Hours Access)"
To detect fraudulent activity like unusual login frequency or off-hours access, Salesforce provides Event Monitoring which includes LoginForensics (part of Login Analytics). LoginForensics analyzes login patterns, calculates averages, and surfaces anomalous behavior such as users exceeding average login counts or logging in outside business hours.
Correct Option:
B. Login Forensics
Login Forensics is a feature within Salesforce Event Monitoring (Login Analytics). It uses machine learning and statistical analysis to identify anomalies in login behavior. It can show average logins per user, flag users logging in during non-business hours, and highlight users who exceed the average. This is specifically designed for security monitoring and fraud detection.
Incorrect Options:
A. Login Inspector
There is no standard Salesforce feature called "Login Inspector." This may be confused with Login Forensics or a third-party tool. It is not a valid native tool for tracking average logins or off-hours activity.
C. Login Report
Standard login reports (from Login History) can show raw login events but cannot calculate averages, compare users against averages, or automatically highlight anomalies. Login reports require manual analysis and do not provide the behavioral analytics needed for fraud detection.
D. Login History
Login History is a standard setup audit trail showing raw login events (timestamp, user, IP, status). It does not compute averages, flag off-hours logins automatically, or identify anomalous patterns. While useful for basic auditing, it lacks the advanced analytics required for this use case.
Reference:
Salesforce Help Article: "Monitor Login Activity with Event Monitoring – Login Forensics"
Trailhead: "Event Monitoring for Security" – Unit on "Login Forensics"
Salesforce Architect Documentation: "Login Forensics Metrics (Average Logins, Off-Hours Access)"