What type of threat actor activity might this represent?

An analyst notices that one of their servers is sending an unusually large amount of traffic, gigabytes more than normal, to a single system on the Internet. There doesn’t seem to be any associated increase in incoming traffic.

What type of threat actor activity might this represent?
A . Data exfiltration
B . Network reconnaissance
C . Data infiltration
D . Lateral movement

View Answer

Answer: A