Which of the following is a situation that UEBA would flag for review? More than one answer may be correct. Check All That Apply A user normally spends less than an hour accessing a secure server. One day, she spends almost all of her time accessing the data on that server. A user who normally log on to the server every day between 8:55 and 9.00am. doesn't log on for five consecutive days. A user normally occesses the network from a location inside the offlce. One day, she accesses the network from an outside location using the organization's VPN. A user who normiliy sends between 50 and 100 emails a doy sends over 1,000 emails one day