What is the measurement interval for the exfiltration test?

• A. Every four minutes
• B. Every two minutes
• C. Every ten minutes
• D. Every thirty seconds

Answer: (A)

Measuring interval for an exfiltration test is about how often you sample the data to detect any leakage. You want enough resolution to notice changes in the exfiltration rate, but not so frequent that the monitoring system becomes overwhelmed with data or noise.

If you sample too often, you’ll waste resources handling tiny fluctuations and you may miss the bigger pattern due to noise. If you sample too slowly, short bursts of exfiltration can go unnoticed, and you’ll have delayed or inaccurate detection of anomalies. The four-minute interval strikes a practical balance: it provides enough temporal granularity to spot spikes or trends while keeping the data volume and processing overhead manageable. With this approach, you can compute a meaningful rate over each four-minute window and compare it against baselines or thresholds to identify unusual activity.

That’s why the four-minute interval is the most suitable default for the exfiltration test.