Question

A security analyst at a financial institution has discovered that sensitive customer data was transferred outside of the organization's network.

Which of the following is the MOST likely explanation for the data transfer?

answer

Data replication


Data exfiltration


Data backup


Data archiving

Answer 1

Data exfiltration

Explanation: transferring sensitive customer data outside the organization’s network in a way that constitutes a security incident is most consistent with data exfiltration (unauthorized/malicious removal of data). Data replication, backup, and archiving are legitimate processes and would normally be controlled and authorized.