In cybersecurity terminology, Indicators of Compromise (IOCs) indicate what?

Study for the Certified Bank Secrecy Act Professional Test. Use flashcards and multiple-choice questions with hints and explanations. Get exam ready!

Multiple Choice

In cybersecurity terminology, Indicators of Compromise (IOCs) indicate what?

Indicators of Compromise are signals that a system or network has been breached or is under attack. They are observable artifacts—things you can detect or measure on endpoints, networks, or logs—such as known malware hashes, suspicious domain names or IP addresses, unusual login times, or unexpected file changes. These indicators help security teams detect, investigate, and respond to incidents by pointing to where malicious activity has occurred or is in progress. That’s why the best choice is signs indicating potential security breaches. Prevention methods, defenders’ tools, and legal reporting requirements describe actions, capabilities, or rules rather than observable signs of an intrusion.

Indicators of Compromise are signals that a system or network has been breached or is under attack. They are observable artifacts—things you can detect or measure on endpoints, networks, or logs—such as known malware hashes, suspicious domain names or IP addresses, unusual login times, or unexpected file changes. These indicators help security teams detect, investigate, and respond to incidents by pointing to where malicious activity has occurred or is in progress.

That’s why the best choice is signs indicating potential security breaches. Prevention methods, defenders’ tools, and legal reporting requirements describe actions, capabilities, or rules rather than observable signs of an intrusion.

More practice questions