An administrator discovers that some files on a database server were recently encrypted. The administrator sees from the security logs that the data was last accessed by a domain user. Which of the…

The correct answer is A. Insider threat. An insider threat is a type of attack that originates from someone who has legitimate access to an organization's network, systems, or data. In this case, the domain user who encrypted the files on the database server is an example of an insider threat, as they abused their…

Submitted by omar99· Mar 6, 2026Threats, vulnerabilities, and mitigations

Question

An administrator discovers that some files on a database server were recently encrypted. The administrator sees from the security logs that the data was last accessed by a domain user. Which of the following best describes the type of attack that occurred?

Options

AInsider threat
BSocial engineering
CWatering-hole
DUnauthorized attacker

How the community answered

(55 responses)

A
84% (46)
B
4% (2)
C
11% (6)
D
2% (1)

Explanation

An insider threat is a type of attack that originates from someone who has legitimate access to an organization's network, systems, or data. In this case, the domain user who encrypted the files on the database server is an example of an insider threat, as they abused their access privileges to cause harm to the organization. Insider threats can be motivated by various factors, such as financial gain, revenge, espionage, or sabotage.

Community Discussion

No community discussion yet for this question.

Full SY0-701 Practice