A. An attacker floods an email inbox with spam messages to disrupt communication

B. An attacker exploits an email client vulnerability to execute remote code

C. An attacker impersonates a trusted entity to trick employees into sending money or sensitive data

D. An attacker uses malware to gain control of an email server

A. To encrypt files and demand payment for decryption

B. To disrupt physical security controls

C. To trick victims into participating in scams

D. To exfiltrate data for espionage purposes

A. Compliance with regulatory reporting requirements

B. Transparency and accuracy

C. Delaying responses to avoid spreading misinformation

D. Using a single communication channel for all stakeholders

A. DNS tunneling

B. ARP spoofing

C. Keylogging

D. SQL Injection

A. To remove the threat, recover affected systems, and prevent recurrence

B. To analyze and document the incident but take no further action

C. To completely shut down the organization's network after an attack

D. To inform only executive leadership and ignore technical teams

A. Multiple failed login attempts from a single IP address

B. A sudden spike in DNS queries

C. An increase in database read requests

D. High CPU usage on cloud servers