During routine monitoring, your network's security systems have flagged unusual outbound traffic from several internal machines. These devices appear to be attempting unauthorized communications with unfamiliar remote servers. What is this activity most indicative of?
These machines might be independently infected with a worm, trying to spread across the network.
The systems may have been recruited into a botnet, seeking instructions from a controlling server.
The devices may be implementing a bridge between the internal and private networks without authorization.
This could indicate MAC spoofing, where the devices are mimicking hardware addresses.