CompTIA Security+ SY0-701 Practice Question
You are a security analyst and have networking monitoring solutions in place to detect strange or potentially malicious traffic. One of these solutions has sent an alert saying it detected outgoing network traffic from the company's network that was routing to a well-known malicious endpoint. Of the following options which is the most likely to be the cause of this traffic?
A user has attached confidential materials to an outgoing email
An infected server or user machine is attempting to contact a command-and-control server
A colleague on your team is conducting a pentest
A hacker is probing the company network from the outside