A SOC analyst notices a sudden spike in outbound traffic from a server. The traffic is being sent continuously to an unknown external IP address. Which of the following BEST describes this behavior?

The correct answer is B. Data exfiltration. A sudden and sustained outbound transfer to an unknown IP is a common sign of data

Cyber Incident Response

Question

Options

ABrute-force attack
BData exfiltration
CLateral movement
DFailed command-and-control communication

How the community answered

(40 responses)

A
3% (1)
B
90% (36)
C
3% (1)
D
5% (2)

Explanation

A sudden and sustained outbound transfer to an unknown IP is a common sign of data

Topics

#data exfiltration#network traffic analysis#outbound traffic#SOC monitoring

Community Discussion

No community discussion yet for this question.

Full CY0-001 Practice