nerdexam
CompTIA

SY0-701 · Question #222

A systems administrator notices that the research and development department is not using the company VPN when accessing various company-related services and systems. Which of the following…

The correct answer is D. Shadow IT. The activity described, where a department is not using the company VPN when accessing various company-related services and systems, is an example of Shadow IT. Shadow IT refers to the use of IT systems, devices, software, applications, and services without explicit IT…

Submitted by jaden.t· Mar 6, 2026General security concepts

Question

A systems administrator notices that the research and development department is not using the company VPN when accessing various company-related services and systems. Which of the following scenarios describes this activity?

Options

  • AEspionage
  • BData exfiltration
  • CNation-state attack
  • DShadow IT

How the community answered

(39 responses)
  • A
    3% (1)
  • B
    5% (2)
  • D
    92% (36)

Explanation

The activity described, where a department is not using the company VPN when accessing various company-related services and systems, is an example of Shadow IT. Shadow IT refers to the use of IT systems, devices, software, applications, and services without explicit IT department Espionage: Involves spying to gather confidential information, not simply bypassing the VPN. Data exfiltration: Refers to unauthorized transfer of data, which might involve not using a VPN but is more specific to the act of transferring data out of the organization. Nation-state attack: Involves attacks sponsored by nation-states, which is not indicated in the Shadow IT: Use of unauthorized systems and services, which aligns with bypassing the company

Community Discussion

No community discussion yet for this question.

Full SY0-701 Practice