Câu 13: SPLK-5001: Splunk Certified Cybersecurity Defense Analyst

An analyst notices that one of their servers is sending an unusually large amount of traffic, gigabytes more than normal, to a single system on the Internet. There doesn’t seem to be any associated increase in incoming traffic. What type of threat actor activity might this represent?

1. A. Data exfiltration — đáp án hiện tại
2. B. Network reconnaissance
3. C. Data infiltration
4. D. Lateral movement