MENU
Over the last year, an organization's HR department has accessed data from its legal department on the last day of each month to create a monthly activity report. An engineer is analyzing suspicious activity alerted by a threat intelligence platform that an authorized user in the HR department has accessed legal data daily for the last week. The engineer pulled the network data from the legal department's shared folders and discovered above average-size data dumps. Which threat actor is implied from these artifacts?
Suggested Answer: C
Get Premium 300-215 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
8 comments · newest first
LU
Lucia
12 months ago
Privilege escalation seems likely too, but the data dumps are a red flag!
TW
Twana
12 months ago
I’m not sure it’s a malicious insider; could just be user errors.
JA
Jacqueline
1 year ago
Wait, daily access to legal data? That's odd...
JE
Jerry
1 year ago
Definitely suspicious activity from someone in HR.
AM
Ammie
1 year ago
Sounds like a classic case of a malicious insider.
ST
Stephane
1 year ago
Hmm, this looks like a tricky one. I'll need to think through the different object types in Financial Services Cloud to determine the best fit for modeling a client.
JU
Junita
1 year ago
I'm a little confused on this one. Is it possible it could be an EMS Cart? I'll have to re-read the question closely.
JA
Jacquelyne
1 year ago
I'm a bit unsure about this one. The question is asking for the different types of NIACAP accreditation, but I'm not entirely confident I know what all the options are. I'll have to make an educated guess.