The security administrator is observing unusual network behavior from a workstation. The
workstation is communicating with a known malicious destination over an encrypted tunnel. A full
antivirus scan, with an updated antivirus definition file, does not show any signs of infection. Which
of the following has happened on the workstation?
A.
Zero-day attack
B.
Known malware infection
C.
Session hijacking
D.
Cookie stealing