Which of the following is typically a sign of a security breach?

• A. Increased software updates
• B. Unusual outbound network traffic
• C. Frequent password changes
• D. Frequent data backups

Answer: (B)

Unusual outbound network traffic is often a significant indicator of a security breach. When a system experiences a security incident, such as a malware infection or unauthorized access, it may lead to unexpected data being transmitted to external locations. This includes sensitive information being exfiltrated or communications with a command and control server by compromised devices. Monitoring outbound traffic patterns can reveal anomalies that suggest a security compromise is in progress, allowing for timely intervention to mitigate potential damage.

In contrast, increased software updates generally signify good security practices, as regular updates help patch vulnerabilities. Frequent password changes are a common defense mechanism to enhance security but don't necessarily indicate a breach on their own, especially if implemented as a standard policy. Similarly, regular data backups are critical for data recovery and continuity, providing a safeguard against data loss but do not indicate a breach in themselves.