Which term is associated with signs indicating potential security breaches?

• A. Advanced EPDR
• B. Indicators of Attack (IOAs)
• C. Indicators of Compromise (IOCs)
• D. XDR Capabilities

Answer: (B)

Indicators of attack are signals tied to attacker behavior that suggest a breach is in progress or may occur. They focus on the attacker’s techniques, patterns, and sequences of activity, allowing security teams to detect and respond before a full breach unfolds. This proactive nature is what makes them the right answer for signs indicating potential security breaches.

In contrast, indicators of compromise are evidence that a breach has already happened—concrete artifacts such as file hashes, known malicious IPs, domain names, or registry changes. Advanced EPDR and XDR Capabilities describe broader protection platforms and capabilities, not the specific signs that a breach might be starting.