Câu 173: CS0-003: CompTIA CySA+ (CS0-003)

A network analyst notices a long spike in traffic on port 1433 between two IP addresses on opposite sides of a WAN connection. Which of the following is the most likely cause?

1. A. A local red team member is enumerating the local RFC1918 segment to enumerate hosts
2. B. A threat actor has a foothold on the network and is sending out control beacons
3. C. An administrator executed a new database replication process without notifying the SOC — đáp án hiện tại
4. D. An insider threat actor is running Responder on the local segment, creating traffic replication