اختبار شهادة محلل الأمن السيبراني CompTIA CySA+

السؤال 393 من 1040

كل الأسئلة

A systems administrator is reviewing after-hours traffic flows from data-center servers and sees regular outgoing HTTPS connections from one of the servers to a public IP address. The server should not be making outgoing connections after hours. Looking closer, the administrator sees this traffic pattern around the clock during work hours as well. Which of the following is the most likely explanation?

الخيارات

  • A C2 beaconing activity
  • B Data exfiltration
  • C Network host IP address scanning
  • D Anomalous activity on unexpected ports
  • E A rogue network device

النقاشات

لا توجد نقاشات منشورة لهذا السؤال حالياً.