CompTIA Security+ (SY0-701) SY0-701 — Question 199

A systems administrator notices that the research and development department is not using the company VPN when accessing various company-related services and systems. Which of the following scenarios describes this activity?