Today’s 220-1102 CompTIA A+ Pop Quiz: That delete key

A company has identified unauthorized materials on an internal web server, but no malware or vulnerability has been identified and all patches are up to date. Which of the following would be the MOST likely reason for this?