A security analyst observes that a user's account has logged in from two different countries within an hour. Which indicator of malicious activity does this scenario BEST represent?
Logging in from two geographically distant locations within a short time frame is indicative of impossible travel, suggesting that the user's credentials may have been compromised. This is a common indicator used to detect unauthorized access. Concurrent session usage involves a user being logged in from multiple locations or devices simultaneously, but not necessarily from implausible distances. Resource consumption refers to excessive use of system resources, which could indicate a denial-of-service attack. Out-of-cycle logging pertains to access attempts occurring outside of normal business hours or established patterns.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is impossible travel in cybersecurity?
Open an interactive chat with Bash
How can impossible travel indicate a compromised account?
Open an interactive chat with Bash
What are the other indicators of malicious activity to be aware of?