A Threat Actor Attacked an Organization's Active Directory Server from a Remote

question 29

Multiple Choice

A threat actor attacked an organization's Active Directory server from a remote location, and in a thirty-minute timeframe, stole the password for the administrator account and attempted to access 3 company servers. The threat actor successfully accessed the first server that contained sales data, but no files were downloaded. A second server was also accessed that contained marketing information and 11 files were downloaded. When the threat actor accessed the third server that contained corporate financial data, the session was disconnected, and the administrator's account was disabled. Which activity triggered the behavior analytics tool?

• A) accessing the Active Directory server
• B) accessing the server with financial data
• C) accessing multiple servers
• D) downloading more than 10 files

---

Definitions:

Skydiving Experience

Skydiving experience covers the activities, sensations, and emotions associated with performing a parachute jump from an airplane.

Physical Object

An item that can be seen and touched, possessing physical characteristics such as shape, volume, and mass.

Service

The action of helping or doing work for someone, often referring to activities performed in exchange for payment that do not result in the ownership of tangible goods.

Marketing

The business process of identifying, anticipating, and satisfying customers' needs and desires through the creation and exchange of value.