Ravi Sir's Cyber Security Cards › Interview Cards
Scenario: Privileged account shows unusual activity. Investigation outline?
Scenario: Privileged account shows unusual activity. Investigation outline? Verify with the human owner out-of-band , check MFA status, and review recent actions. Call or message the owner directly to confirm it was really them, not just trust the chat. “Out-of-band check with the owner, MFA review,

Read card text
What this card says
Short answer
Verify with the human owner out-of-band, check MFA status, and review recent actions.
Example
Call or message the owner directly to confirm it was really them, not just trust the chat.
Say it in the interview
“Out-of-band check with the owner, MFA review, then look at what the account did.”
Why it matters
A privileged account misused can cause the most damage, so confirm fast.
Learn more in the lesson: 47.8 Scenario and HR + Technical Mix