You're the security administrator for a small consulting firm whose network has been the victim of a ransomware attack. The firm decided to pay the ransom to regain their data, but you've been tasked with investigating the attack so that the vulnerabilities can be patched to hopefully prevent scenarios like this in the future.

During your investigation, you discover that the hacker gained initial access to the network through a user account. From there, the hacker was able to gain access to a domain service account. From this account, they ran some custom scripts that exploited vulnerabilities in the network, which gave them access to a domain administrator account. With this privileged account, the attacker was able to execute their ransomware attack.

You've decided to implement a zero$-$trust policy to help prevent this type of attack from occurring in the future. You need to ensure that you apply the policy across all six foundational elements.

Which of the following elements includes users, services, applications, and IoT devices?

answer

Infrastructure

Identities

Networks

Endpoints