A cloud engineer has deployed a virtual storage appliance into a public cloud environment. The storage appliance has a NAT to a public IP address. An administrator later notices there are some strange files on the storage appliance and a large spike in network traffic on the machine. Which of the following is the most likely cause?
A cloud engineer deploying a virtual storage appliance with NAT to a public IP address usually means the appliance is exposed to the internet. If the strange files and network spike are observed, it is most likely due to unauthorized access. The most probable cause is that the default password is still configured on the appliance, making it an easy target for attackers. This is a common security oversight that can lead to compromised access and unauthorized file uploads or downloads.
C. The storage appliance has no firewall.