What does "exfiltration" refer to in data security?

• A. The authorized transfer of data from a system or network
• B. The unauthorized transfer of data from a system or network
• C. The secure storage of data in a network
• D. The process of data encryption in transit

Answer: (B)

Exfiltration in data security specifically refers to the unauthorized transfer of data from a system or network. This typically involves malicious actions where an attacker obtains sensitive information without permission, often leading to data breaches or leaks. The process can happen through various methods, such as malware, phishing attacks, or insider threats, and is a critical concern for organizations aiming to protect sensitive data.

The term is distinct from scenarios where data is transferred legitimately; for example, authorized data transfers are classified differently, denoting that the transfer has proper consent and security measures in place. Furthermore, secure storage and data encryption are focused on safeguarding information rather than the act of taking it away from its intended secure environment. Understanding exfiltration is vital in the context of preventing unauthorized data access and ensuring robust security measures are implemented against potential threats.