Which example of a precursor is true?
A . An admin finds their password has been changed.
B . A log indicating a port scan was run against a host.
C . A notification that a host is infected with malware.
D . A device configuration changed from the baseline without an audit log entry.
Answer: B