Which of the following is a common method used by cybercriminals to exfiltrate data?

• A. Server updates
• B. Phishing attacks
• C. Network monitoring
• D. Data backup techniques

Answer: (B)

Phishing attacks are a prevalent method used by cybercriminals to exfiltrate data. In a phishing attack, cybercriminals send deceptive messages, often appearing to be from legitimate sources, to trick individuals into providing sensitive information such as usernames, passwords, or financial details. This social engineering tactic exploits human psychology rather than relying solely on technical vulnerabilities, making it a highly effective method for data theft.

In contrast, server updates typically serve to improve security and functionality, thereby reducing vulnerabilities that could facilitate data exfiltration. Network monitoring involves observing network traffic to detect suspicious activity and is a defensive measure against data theft. Data backup techniques focus on safeguarding and storing data to prevent loss, rather than on methods of extracting data without authorization. All these other options represent activities that can reinforce security or manage data but do not involve the act of actively stealing or exfiltrating data like phishing attacks do.