An administrator receives an alert with the TTP_DATA_TO_ENCRYPTION. What is known about the alert based on this TTP even if other parts of the alert are unknown?

Question

Options

• AA process attempted to delete encrypted data on the disk.
• BA process attempted to write a file to the disk.
• CA process attempted to modify a monitored file written by the sensor.
• DA process attempted to transfer encrypted data on the disk over the network.

• A
  8% (2)
• B
  71% (17)
• C
  17% (4)
• D
  4% (1)

No community discussion yet for this question.