CompTIA Security+ (SY0-701) — Question 221

The marketing department set up its own project management software without telling the appropriate departments. Which of the following describes this scenario?

Answer options

• A. Shadow IT
• B. Insider threat
• C. Data exfiltration
• D. Service disruption

Correct answer: A

Explanation

The correct term for this situation is Shadow IT, which refers to the use of technology and software without the knowledge or approval of the IT department. Insider threat typically involves malicious actions by an employee, while data exfiltration refers to unauthorized data transfer, and service disruption involves interruptions in service, none of which accurately describe this scenario.