Q12
Single choice
An incident responder discovers that the CEO logged in from their New York City office and then logged in from a location in Beijing an hour later. The incident responder suspects that the CEO's account has been compromised.
Which of the following anomalies MOST likely contributed to the incident responder's suspicion?