Which of the following is an indicator of compromised security infrastructure?

• A. Unauthorized access attempts, repeated screening failures, tampering signs, or unexplained equipment anomalies.
• B. Consistently clean screening results with no anomalies.
• C. No login attempts.
• D. No equipment anomalies.

Answer: (A)

Indicators of compromised security infrastructure show up as concrete signs that defenses are being bypassed or manipulated. The strongest signal is observing unauthorized access attempts, repeated screening failures, tampering signs, and unexplained equipment anomalies. These together point to someone trying to breach, disable, or alter security controls, or to hardware being tampered with, and they demand immediate investigation and containment. In contrast, consistently clean screening results, no login attempts, or no equipment anomalies suggest normal operation and do not indicate a breach by themselves; the absence of issues is not evidence of a compromise, whereas the presence of those specific signs clearly is.