Which security threat should be mitigated first?

An organization installed a new application server for IP phones. An automated process fetched user credentials from the Active Directory server, and the application will have access to on-premises and cloud services .

Which security threat should be mitigated first?
A . aligning access control policies
B . exfiltration during data transfer
C . attack using default accounts
D . data exposure from backups

View Answer

Answer: B