Which event log subtype in FortiSASE captures user management activities?

The correct answer is the subtype that specifically monitors activities related to user management. In FortiSASE, the User Events log is designated to capture all interactions and changes associated with user accounts. This includes actions such as user creation, modifications, deletions, and any other management activities affecting user identities and permissions.

User management activities are critical for maintaining organizational security and compliance, so dedicated logging for these events allows administrators to track who made changes, when they were made, and what specific changes occurred. This level of detail is essential for audits and for identifying potential security issues arising from unauthorized changes or misconfigurations.

The other event log subtypes serve different purposes. System Events focus on changes and activities related to the overall system infrastructure, Security Events log incidents pertaining to security and threat management, while Application Events capture interactions with specific applications or services. Each of these subtypes is important, but they do not specifically target the user management activities that are central to understanding user behavior and account integrity within the system.