Q7
Single choice
A user ' s account is flagged for accessing internal servers from multiple countries within a 30-minute period. The user reports they were at the office during that time.
Which of the following does this activity most likely indicate?