Câu 14: 300-220: Conducting Threat Hunting and Defending using Cisco Technologies for Cybersecurity

A SOC team observed unusual traffic patterns during nonworking hours. Upon further investigation, it was discovered that the traffic is originating from two specific endpoints with outbound connections to the internet. Suspecting potential data exfiltration, the team aims to investigate further based on this hypothesis. Which two threat indicators support the suspicion of data exfiltration? (Choose two.)

1. A. Intense inbound traffic directed to the endpoints.
2. B. Domain requests related to file-sharing websites. — đáp án hiện tại
3. C. Irregular payload sizes during the increased traffic.
4. D. Multiple zip commands executed on endpoints. — đáp án hiện tại
5. E. Multiple requests for the same file from the file server.