Which of these is a red flag that could indicate a ransomware attack on your institution? A. Compromised administrator privileges or escalation of permissions on an account
B. Substantial decrease in database read volume
C. Geographical regularities in access and log in patterns
The correct answer is A. Compromised administrator privileges or escalation of permissions on an account.
Explanation: A red flag for a ransomware attack is the unauthorized escalation of permissions, especially for administrator accounts. This could indicate that an attacker has gained control over important accounts and may have the ability to deploy ransomware or manipulate data. While decreases in database activity or unusual access patterns may also be concerning, they are not as directly indicative of a ransomware attack as compromised permissions are.