Q4
Single choice
A security analyst is monitoring the traffic which is accessing internal and external resources. They find abnormal activity, indicating communication between a compromised internal user(host) and internal infrastructure, and found a suspicious malware activity.
Is this a correct attack stage classification for this activity?
(Exfiltration.)