Identifying Shadow IT in Enterprise Scenarios
A systems administrator notices that the research and development department is not using the company VPN when accessing various company-related services and systems. Which of the following scenarios describes this activity?
Community Votes
85% of anonymous learners picked answer D. Votes are pick records left by other test-takers — they are not the verified answer.
Community Insight
The scenario describes a violation of security policy through unauthorized tool usage rather than malicious intent or data theft, which is the core definition of Shadow IT.
This question tests the identification of Shadow IT, defined as the use of unauthorized systems or services by employees. The correct answer is D because bypassing the VPN indicates unapproved access methods.
Learners often select Data Exfiltration (B) because they assume non-compliance implies malicious data theft, ignoring that the scenario only states the department is not using the VPN, not that data is being stolen.
Community Discussion (6 comments)
Comments & Corrections
No comments yet — spotted an error or have a note? Share it below.
Expert Analysis
Why the Answer Is Correct
Shadow IT refers to hardware, software, applications, or services used by employees without explicit approval from the IT or security departments. In this scenario, the R&D department is accessing company services without the company VPN. This implies they are likely using alternative, unauthorized channels (such as personal devices, unapproved cloud apps, or direct internet connections) to reach internal resources. This behavior fits the definition of Shadow IT perfectly, as it represents a lack of visibility and control for the IT team.Why the Other Options Are Wrong
Espionage (A) and Nation-state attacks (C) imply specific malicious actors with political or corporate espionage motives; there is no evidence of such intent here. Data exfiltration (B) involves the unauthorized transfer of data out of the organization. While Shadow IT can lead to exfiltration, the act of simply not using the VPN does not confirm data is leaving the network. It is an administrative/policy violation first, not necessarily a theft event.Community Comment Notes
Community consensus strongly favors Shadow IT. As user 'nillie' noted, "Shadow IT refers to the use of technology... without the approval or knowledge of the IT department." User 'jsmthy' correctly pointed out that while espionage might be the goal, the activity described is the use of unauthorized means, making Shadow IT the descriptive term for the scenario itself.Exam Strategy
When analyzing threat scenarios, distinguish between the method of access and the intent. If employees are using tools the company doesn't know about, it's Shadow IT. If they are stealing data, it's exfiltration. Always look for the most immediate, fact-based description before assuming malicious intent.
Frequently Asked Questions
Why isn't this considered Data Exfiltration?
Data exfiltration requires evidence of data being moved out of the organization. Not using a VPN is a policy violation (Shadow IT) but doesn't prove theft occurred.
Can Shadow IT lead to espionage?
Yes, Shadow IT creates security gaps that can be exploited for espionage, but the scenario only describes the unauthorized usage, not the malicious outcome.
Related Analysis
Practice All SY0-701 Questions
Access 100 questions with complete answers and detailed explanations.
View Full SY0-701 Practice Test →