Which option describes indicators of attack?

The correct answer is D. malware reinfection within a few minutes of removal. Indicator of Attack (IoA) refers to evidence or signs that an ongoing attack or security breach is in progress. In the context of the options provided, the rapid reinfection of malware shortly after its removal suggests an ongoing attack. This recurrence indicates that the initia

Submitted by chen.hong· Mar 6, 2026Security Monitoring

Question

Options

Ablocked phishing attempt on a company
Bspam emails on an employee workstation
Cvirus detection by the AV software
Dmalware reinfection within a few minutes of removal

How the community answered

(30 responses)

B
3% (1)
C
3% (1)
D
93% (28)

Explanation

Indicator of Attack (IoA) refers to evidence or signs that an ongoing attack or security breach is in progress. In the context of the options provided, the rapid reinfection of malware shortly after its removal suggests an ongoing attack. This recurrence indicates that the initial attempt to remove the malware did not eliminate the root cause, indicating the possibility of an active attack persisting within the system. Identifying such indicators is crucial for organizations to recognize and respond promptly to ongoing threats or attack activities.

Topics

#Indicators of Attack#Incident Response

Community Discussion

No community discussion yet for this question.

Full 200-201 Practice