A SOC analyst is notified by the network monitoring tool that there are unusual types of internal traffic on IP subnet 103.921.2239.0/24. The analyst discovers unexplained encrypted data files on a computer system that belongs on that specific subnet. What is the cause of the issue?
A) DDoS attack
B) phishing attack
C) virus outbreak
D) malware outbreak

Question

Quizplus · Accepted Answer

The presence of unexplained encrypted data files suggests a malware outbreak, possibly ransomware, which encrypts files and demands a ransom for decryption.

A SOC Analyst Is Notified by the Network Monitoring Tool