54. Indicators of Compromise

What is an Indicator of Compromise (IOC)?

• A type of firewall

• A sign that a system may have been breached

• A method of encrypting data

• A type of antivirus software

Which of the following could indicate that your account has been compromised?

• You receive an email from a friend

• Your account is locked due to too many login attempts

• You successfully log in from your usual location

• You change your password regularly

Why might an attacker disable security updates on a compromised system?

• To prevent the system from crashing

• To speed up the system

• To improve the system's performance

• To maintain their access to the system

What might a sudden spike in network traffic at an unusual time indicate?

• A scheduled system update

• A network maintenance activity

• An attacker transferring data

• A user downloading a large file

What should you do if you notice missing log information on your system?

• Investigate for potential compromise

• Restart the system

• Ignore it

• Delete all logs