General Indications of Intrusion include which of the following?

• A. System Intrusions
• B. File System Intrusions
• C. Repeated Probes
• D. All of the Above

Answer: (D)

Indicators of intrusion come from multiple angles, not just one type of activity. System intrusions signal unauthorized access or control of the host, such as unusual logons, privilege escalation, or remote connections from unexpected locations. File system intrusions point to tampering with critical files, configurations, or logs, which can show persistence, data theft, or corruption. Repeated probes reflect ongoing reconnaissance—continuous scanning, probing, or connection attempts that often precede a full breach. Because each of these patterns reveals different facets of an attack, the best answer is that all of the above are general indications of intrusion. In practice, a defender looks for a combination of these signals to detect and respond effectively, since focusing on a single type can miss other signs.