ECCouncil Computer Hacking Forensic Investigator (CHFI-v10) 312-49v10 Question # 62 Topic 7 Discussion

ECCouncil Computer Hacking Forensic Investigator (CHFI-v10) 312-49v10 Question # 62 Topic 7 Discussion

312-49v10 Exam Topic 7 Question 62 Discussion:
Question #: 62
Topic #: 7

You are an information security analyst at a large pharmaceutical company. While performing a routine review of audit logs, you have noticed a significant amount of egress traffic to various IP addresses on destination port 22 during off-peak hours. You researched some of the IP addresses and found that many of them are in Eastern Europe. What is the most likely cause of this traffic?


A.

Malicious software on internal system is downloading research data from partner 5FTP servers in Eastern Europe


B.

Internal systems are downloading automatic Windows updates


C.

Data is being exfiltrated by an advanced persistent threat (APT)


D.

The organization's primary internal DNS server has been compromised and is performing DNS zone transfers to malicious external entities


Get Premium 312-49v10 Questions

Contribute your Thoughts:


Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.