You are an information security analyst at a large pharmaceutical company.

Vendor: ECCouncil
Product: 312-49v10
Update on: Jul 30, 2025
Questions: 704

ECCouncil 312-49v10 Question Answer

You are an information security analyst at a large pharmaceutical company. While performing a routine review of audit logs, you have noticed a significant amount of egress traffic to various IP addresses on destination port 22 during off-peak hours. You researched some of the IP addresses and found that many of them are in Eastern Europe. What is the most likely cause of this traffic?

Malicious software on internal system is downloading research data from partner 5FTP servers in Eastern Europe

Internal systems are downloading automatic Windows updates

Data is being exfiltrated by an advanced persistent threat (APT)

The organization's primary internal DNS server has been compromised and is performing DNS zone transfers to malicious external entities