What is the function of a command and control server?

Question

Options

• AIt enumerates open ports on a network device
• BIt drops secondary payload into malware
• CIt is used to regain control of the network after a compromise
• DIt sends instruction to a compromised system

• B
  3% (1)
• C
  3% (1)
• D
  94% (34)

Explanation

Command and Control (C2) Server Explanation

A Command and Control (C2) server is infrastructure controlled by a threat actor that communicates with compromised systems (known as "bots" or "zombies"), sending them instructions such as exfiltrating data, launching attacks, or downloading additional malware - making D correct.

Why the distractors are wrong:

• A describes a port scanner (like Nmap), which is a reconnaissance tool, not a C2 server
• B is partially related but incorrect - while a C2 server can instruct delivery of secondary payloads, dropping the payload is the malware's action, not the server's defining function
• C describes a remediation or incident response activity, which is the defender's role, not an attacker's C2 infrastructure

Memory Tip: Think of C2 as a "puppet master" - the compromised systems are puppets, and the C2 server is the master sending instructions (commands) and receiving stolen data (control). The name itself gives it away: Command = sending orders, Control = maintaining power over the compromised host.

No community discussion yet for this question.