A utility security team worries about sensitive GIS exports leaving the network. What monitoring emphasis best addresses that risk while staying effective over time?
Select an answer to reveal the explanation.
Short Explanation
Data walking out the door is the quiet failure mode — watch the exits, not just the lobby. Monitor egress for exfil tells and keep retuning as traffic shifts. Blind outbound trust or anonymous FTP is asking for a leak.
Full Explanation
Egress monitoring detects unauthorized data movement across outbound channels and is a core continuous-monitoring practice. Detections must be tuned over time as applications, baselines, and adversary techniques evolve. Focusing only on inbound threats or deliberately exposing sensitive repositories increases exfiltration risk.