Which of these is a red flag that could indicate a ransomware attack on your institution? A. Compromised administrator privileges or escalation of permissions on an account
B. Substantial decrease in database read volume
C. Geographical regularities in access and log in patterns
The correct answer is A. Compromised administrator privileges or escalation of permissions on an account.
Explanation: This is a red flag for a ransomware attack because attackers often gain administrative access to facilitate their attack, allowing them to encrypt files and demand ransom. Monitoring for unusual privilege escalations can help detect potential breaches before significant damage occurs.