Which statement describes indicators of attack?

The correct answer is B. Internal hosts communicate with countries outside of the business range. Indicators of Attack (IoA) refer to observable behaviors or artifacts that suggest a security breach or ongoing attack. When internal hosts communicate with countries outside the business range, it may indicate data exfiltration or command-and-control communication to an…

Submitted by yaw92· Mar 6, 2026Security Monitoring

Question

Options

AA malicious file is detected by the AV software.
BInternal hosts communicate with countries outside of the business range.
CPhishing attempts on an organization are blocked by mail AV.
DCritical patches are missing.

How the community answered

(20 responses)

B
85% (17)
C
5% (1)
D
10% (2)

Explanation

Indicators of Attack (IoA) refer to observable behaviors or artifacts that suggest a security breach or ongoing attack. When internal hosts communicate with countries outside the business range, it may indicate data exfiltration or command-and-control communication to an external threat actor. Unlike Indicators of Compromise (IoC) which indicate that a system has already been compromised, IoAs are often used to identify malicious activity in its early stages. Monitoring for unusual outbound connections is a crucial aspect of detecting advanced persistent threats (APTs) and other sophisticated

Topics

#indicators of attack#threat detection#security monitoring

Community Discussion

No community discussion yet for this question.

Full 200-201 Practice