The process by which an attacker takes data stored inside of a private network and moves it to an external network is called what?

The process by which an attacker takes data stored inside of a private network and moves it to an external network is called what?

• A. Data exfiltration
• B. Fraud
• C. Extortion
• D. Blackmail

Answer: (A)

Data exfiltration is the process of covertly moving data from inside a private network to an external destination controlled by an attacker. When someone gains access to sensitive information within a network, the attacker’s goal is often to transfer that data out so it can be used, sold, or exposed. This term specifically describes the act of leaving the internal environment with data, rather than the motivations or threats involved. This concept is distinct from fraud, which centers on deception for financial gain; extortion, which involves threats to force payment or concessions; and blackmail, which uses threats to reveal damaging information. Those terms describe broader schemes or coercive tactics, while exfiltration focuses on the data transfer itself. In practice, defenders watch for unusual outbound data flows, enforce data loss prevention controls, and limit where data can go to detect and stop exfiltration.

Data exfiltration is the process of covertly moving data from inside a private network to an external destination controlled by an attacker. When someone gains access to sensitive information within a network, the attacker’s goal is often to transfer that data out so it can be used, sold, or exposed. This term specifically describes the act of leaving the internal environment with data, rather than the motivations or threats involved.

This concept is distinct from fraud, which centers on deception for financial gain; extortion, which involves threats to force payment or concessions; and blackmail, which uses threats to reveal damaging information. Those terms describe broader schemes or coercive tactics, while exfiltration focuses on the data transfer itself. In practice, defenders watch for unusual outbound data flows, enforce data loss prevention controls, and limit where data can go to detect and stop exfiltration.