CompTIA Security+ (SY0-701) SY0-701 — Question 92

A security analyst receives alerts about an internal system sending a large amount of unusual DNS queries to systems on the internet over short periods of time during non-business hours. Which of the following is most likely occurring?