What is the difference between indicator of attack (loA) and indicators of compromise (loC)?

The correct answer is C. loC is the evidence that a security breach has occurred, and loA allows organizations to act. An Indicator of Compromise (IoC) is a sign that a system or network has already been compromised and is used to determine if an attack has already occurred and to identify the scope of the compromise. An Indicator of Attack (IoA), on the other hand, is a signal or pattern that…

Submitted by valeria.br· Mar 6, 2026Security Concepts

Question

Options

AloA is the evidence that a security breach has occurred, and loC allows organizations to act
BloA refers to the individual responsible for the security breach, and loC refers to the resulting loss.
CloC is the evidence that a security breach has occurred, and loA allows organizations to act
DloC refers to the individual responsible for the security breach, and loA refers to the resulting loss.

How the community answered

(45 responses)

A
2% (1)
C
93% (42)
D
4% (2)

Explanation

An Indicator of Compromise (IoC) is a sign that a system or network has already been compromised and is used to determine if an attack has already occurred and to identify the scope of the compromise. An Indicator of Attack (IoA), on the other hand, is a signal or pattern that suggests an attack is currently underway or about to occur and is used to detect and respond to an attack in progress.

Topics

#IoC#IoA#Threat detection#Security indicators

Community Discussion

No community discussion yet for this question.

Full 200-201 Practice